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HP Customer Support Services 



How to get the latest software/agent firmware 

You can download from the World Wide Web, HP FTP Library Service, CompuServe, 
and HP BBS a compressed file (j3100b.exe) containing the latest version of the HP 
Switch 2000 software and proprietary M IB, the HP J 3108A F DDI Module software, and 
a software download utility file (update.exe). After you download the file, extract the 
file by typing filename and pressing [Inter) . For example, j3100b [Enter] , 

World Wide Web 

http://www.hp.com/go/network_city 

Select the "Support" section. 

From this web site, you can also download information on the HP networking 
products. If you have a growing network, download the Designi ng HP AdvanceStack 
Workgroup Networks Gu i deor call 1-800-752-0900 in the U .S. to receive a copy through 
the mail. 

HP FTP Library Service 

1. FTP to Internet IP Address — ftp ftp.hp.com. 

2. Log in as anonymous and press [ Return | at the password prompt. 

3. Enter bin to set the transfer type. 

4. Enter cd /pub/networking/software. 

5. E nter get filename to transfer the file to your computer, then quit. 

CompuServe 

1. Login to CompuServe. 

2. Go to the "hp" service. 

3. Select "HP Systems, Disks, Tapes, etc." 

4. Select "Networking Products" library. 

5. Download filename and then quit. 

HP BBS 

Set your modem to no parity, eight bits, 1 stop bit, set speed up to 14400 bps, and with 
your telecommunication program (e.g., Windows Terminal) dial (208) 344-1691 in the 
U.S. to get the latest software for your HP networking product. For other countries, 
see http://www.hp.com/cposupport/eschome.html. 



( over for more servi ces) 
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Obtain the latest console code (j3100b.exe) from 

HP FTP Library: ftp ftp-boi.external.hp.com 

World Wide Web: http://www.hp.com/go/network_city 



HP BBS: 
(over) 



(208) 344-1691 
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HP FIRST Fax Retrieval Service 

HP FIRST is an automated fax retrieval service that is available 24 hours a day, seven 
days a week. HP FIRST provides information on the following topics: 

■ Product information 

■ Troubleshooting instructions 

■ Technical reviews and articles 

■ Configuration information 



To access HP FIRST, dial one of the following phone numbers: 



Location 


Phone Number 


U.S. and Canada Only 


Dial 1(800) 333- 1917 with your fax machine or touch-tone phone 




and press 1. 


Outside the U.S. and Canada 


Dial 1 (208) 344-4809 from your fax machine and press 9. 


To receive a list of currently available documents, enter document number 19941. The information 
you requested will be sentto you by return fax. For other countries, see http://www.hp.com/ 
cposupport/eschome.html. 



Additional HP Support Services 

In addition to the above services, you can purchase various HP telephone support 
services which provide you expert HP technical assistance: 

■ Network Phone-In Support provides you support at an hourly rate. In the U.S., 
call 1-800-790-5544. In other countries, pleasecontactyour local HP Response 
Center to see if this service is available in your country. 

■ HP SupportPack Comprehensive Network Support provides complete prob- 
lem resolution for medium to large interconnected local and wide area 
networks. Contact your HP Authorized Reseller or the nearest HP Sales and 
Support Office for more information. 

HP offers other hardware support services. Please contact your reseller for more 
information. 
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Go hpsys 
Lib 7. 

Downloadj3100b.exe 



Network Phone-In 1-800-790-5544 
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Disclaimer 
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change without notice. 
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Preface 

Use of This Guide and Other Switch 2000 
Documentation 

This guide describes how to install the B-version of the Switch 2000 (HP 

J 3100B) in your network and use the console interface for the 

HP AdvanceStack Switch 2000 (hereafter referred to as the "Switch 2000"). 



Operating This manual describes features of the B-version of the Hewlett-Packard 

Differences Switch 2000 (H P J 3100B). I n some cases, such as the Spanning Tree Protocol 
(operating within VLANs) and port trun king capabilities, there are significant 
operating differences between the A-version of the Switch 2000 (HP J 3100A) 
and the B-version. For information on thefeatures available in the A-version, 
refer to the manuals shipped with that product. 



Important! Before installing or removing an interface module (or installing 
or removing a transceiver used with a module), refer to the specific module 
documentation describing these procedures. 

■ If you need information on specific parameters in the console interface, 
refer to the online help provided in the interface. 

■ If you need further information on Hewlett-Packard switch technology, 
refer to the HP AdvanceStack Products CD shipped with your Switch 
2000. 
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Overview of Console Applications 




Figure 1. Example of the HP AdvanceStack Switch 2000 with Optional Modules 
and Transceivers installed 

When powered-up in the factory default configuration, the Switch 2000 
automatically operates as a multiport learning bridge with the following 
configuration: 

■ All installed ports are enabled and are members of a single broadcast 
domain 

■ Spanning tree protocol (STP) is disabled 



The console interface provides the following capabilities for use when you 
want to move beyond this basic level of operation: 

■ Monitoring system performance and status 

■ Customizing the system configuration for improved performance and 
unique system requirements 

■ Enabling network management (SNMP) access 

■ Setting passwords to help protect system security 

■ Downloading system software updates 

■ Troubleshooting 
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Installation Summary 
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This chapter describes the installation procedures for the HP J 3100B 
AdvanceStack Switch 2000 (hereafter referred to as the Switch 2000). 
The following is a summary of those procedures: 

1. I nstall interface modules and transceivers ( optional) .The best time 
to install Switch 2000 interface modules and their related transceivers is 
prior to powering up the switch or during scheduled down times. Note 
that, because the Switch 2000 allows module changes ("hot swaps") while 
operating, you can makehardwarechangesoncetheswitch isin use. That 
is, you can replace one module with another module of the same type 
without needing to reboot the switch. Similarly, you can install a module 
in an unused slotwithoutneedingto rebootthe switch. (An "unused slot" 
is one that has not been used si nee the last time the switch was rebooted.) 
However, it is necessary to remove a particular interface module from the 
Switch 2000 before adding, removing, or changing a transceiver in that 
module. In cases where one module is exchanged for another of a different 
type, it is necessary to reboot or reset the switch. This procedure is 
described later in this chapter and also in the installation guides for the 
various interface modules that are compatible with the Switch 2000. 

2. Install the optional redundant power supply ( R PS) . This optional 
power supply (H P J 3136A AdvanceStack Switch 2000 Redundant Power 
Supply) shares the power requirement load with the switch's main power 
supply, and will keep the switch operating in the unlikely event that the 
main power supply fails. 

3. Verify the switch's operation. This is a simple process of applying 
power to the Switch 2000 and ensuring that the LEDs on the switch's front 
panel respond properly. 

4. Mount the switch in a rack or place it on a tabletop. 

Hewlett-Packard sells 19-inch free-standing equipment racks. To order a 
rack, contact your HP-authorized LAN dealer. 
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Installing the Switch 

Installation Summary 



Warning Install the Switch 2000 only on a tabletop or in an equipment rack or 

cabinet designed for this product. The Switch 2000 weighs a minimum 
of 17.3 lbs ( 7.86 kilos) with no interface modules or redundant power 
supply installed. Rack or cabinet mounting should be done by two 
people. If the rack or cabinet is empty, install the Switch 2000 at the 
bottom; if not, install the switch as close to the bottom as possible. 
( If a lightweight device is already installed at the bottom, you may 
want to remove it, install the Switch 2000 at the bottom, then reinstall 
the lightweight device above the Switch 2000.) If the Switch 2000 is 
mounted high, the rack or cabinet may become unstable and possibly 
fall over. 



5. Connect the Switch 2000 to a network and connect computers and/ 
or other devices to the switch's ports. 

6. Configure the Switch 2000. The Switch 2000, in its factory default 
configuration, operates as a multiport transparent bridge. You will need 
to use the console interface to configure the switch for additional func- 
tionality. Initially, this requires one of the following: 

• A PC with a terminal emulator connected to the Console RS-232 port 
on the switch either directly or via a modem 

• An actual terminal directly connected to the Console RS-232 port on 
the switch 

(For examples of terminal emulator configurations, refer to appendix C, 
"Sample Console Configurations".) 

7. After receiving a minimal IP or IPX configuration through one of the above 
options, you can also access the console interface via Telnet or use a 
network management tool for some configuration and monitoring func- 
tions. 
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Installing the Switch 

1. Install Add-In M odules (Optional) 



1. Install Add-In Modules (Optional) 




To begin operating in your network, the Switch 2000 needs at least one * 
interface module. If you need to install a module, refer to the instructions you it 
received with the module(s) you plan to use. Note that you must install any jj 1 
optional transceivers in a module before installing the module in the Switch ft 
2000, or remove the module from the switch before installing an optional 
transceiver. (Refer to the documentation for the specific module.) For exam- 
ple, the HP J 3102A AdvanceStack Switch 2000 4-Port lOBase-T module illus- 
trated below is shown with the optional HP J 2608A ThinLAN transceiver 
installed. (Transceivers must be purchased separately.) 



Caution If you will be installing or removing a module while the switch is operating, 

refer to the documentation you received with the module for important 
information, including any "read me" file on the disk shipped with the module. 
Also, refer to the module documentation if you will be installing or removing 
a transceiver from a module in an operating Switch 2000. 




Figure 1-1. HP J 3102A Interface Module With Optional Transceiver Installed 



Itmay bemoreconvenientto install a modulebeforeinstallingtheSwitch 2000 
into a rack or other location. Inspect your installation site and identify whether 
the switch's module slots will be accessible. 

For a description of currently available modules, contact your HP-authorized 
LAN dealer. 
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Installing the Switch 

2. Install the Redundant Power Supply (Optional) 



2. Install the Redundant Power Supply 
(Optional) 



Caution Disconnect the power supply from the Switch 2000 before installing the 

redundant power supply (RPS). Otherwise, damage to the switch's 
components could occur. 



N ote For important information on how to install theHPJ 3136A AdvanceStack 

Switch 2000 Redundant Power Supply (RPS) i n the Switch 2000, refer to 
the docu mentati on provi ded wi th the RPS. 

Theoptional HPJ 3136A AdvanceStack Switch 2000RedundantPowerSupply 
(RPS) shares the power load with the Switch 2000's main power supply. It is 
recommended that, if possible, you install the RPS before beginning to use the 
switch in your network. Otherwise, you mustscheduledowntimeto install the 
RPS. (RPS installation requiresremoval of theSwitch 2000'sback panel, which 
interrupts power to the switch.) When the RPS is installed in a Switch 2000 
and power is applied to the RPS, the RPS LED on theSwitch 2000's front panel 
is lit. 
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Figure 1-2. RPS LED on the Switch 2000's Front Panel 



The RPS connects to the back of the Switch 2000. Thus, if you are going to 
install an RPS, it may be more convenient to install it before installing the 
Switch 2000 into a rack or other location. Inspect your installation site and 
identify whether the switch's back panel will be accessible. 
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Installing the Switch 

3. Verify the Switch's Operation 



3. Verify the Switch's Operation 



This process verifies that the Switch 2000 is operating properly. 
Verify the Switch Hardware 

1. Connect the supplied power cord to the switch's power receptacle. 



Figure 1-3. Back Panel of the Switch 2000 

2. Plug the power cord into a properly grounded electrical outlet. 

Neither the Switch 2000 nor the RPS has a power switch. The Switch 2000 is 
powered on when the power cord for either the switch itself or an installed 
RPS is plugged into a power source. 

If your installation requires a different power cord than the one supplied with 
the switch, be sure to use a power cord displaying the mark of the safety 
agency that defines the regulations for power cords in your country. The mark 
is your assurance that the power cord can be used safely with the switch. 



s 



Power Receptacle on the 
Backof the Switch, with 
Power Cord Connected 




3. Check the LEDs on the switch's front panel. 



Installing the Switch 

3. Verify the Switch's Operation 
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Figure 1-4. The Switch 2000 System LEDs 



When the switch is powered on, it performs a self-diagnostic test. During 
the test, the following occurs: 

• All LEDs turn on momentarily. 

• The Power LED remains on; the Fault LED turns on. 

• The RPS LED turns on if an RPS is connected and supplying power. 

• The Self-test and Fault LEDs remain on for less than one minute. 

When the self-test completes successfully, the following events occur: 

• The power LED and, if an RPS is connected, the RPS LED, remain on. 

• The self-test and Fault LEDs turn off. 



N ote If any Fault LED is flashing, the Switch 2000 has encountered a problem. Refer 

to chapter 9, "Troubleshooting". 

4. After the switch has passed its self-test, disconnect the power cord from 
the switch and proceed with the mounting instructions. 



N ote If the switch's permanent location makes it difficult to access the Console 

RS-232 port from a terminal or PC running a terminal emulator, you may want 
to temporarily connect a terminal device now and configure the switch 
minimally for Tel net access. If you want to do this, refer to "Connect a Console 
Device" on page 1-14 before continuing here. 
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Installing the Switch 

4. M ountthe Switch 



4. Mount the Switch 

A Switch 2000 can be mounted in two ways: 

■ In a rack or cabinet 

■ On a table 

The hardware for mounting the switch is included in the accessory kit 
(5063-8544) packed with the switch. 

Hewlett-Packard sells 19-inch free-standing equipment racks. For more infor- 
mation, contact your H P authorized LAN dealer. 



M ou nti ng Before mounting the switch, read and follow these mounting precautions: 

Precautions a p| an the switch's location and orientation relative to other devices and 

equipment. Also consider the cabling that will be attached to the switch 
and ports that will be used. In the front of the switch, leave 3 inches 
(7.6 cm) of space for twisted-pair cables. In the back of the switch, leave 
1-1/2 inches (3.8 cm) of space for the power cord. 

■ Ensure that any installation of Switch 2000s, together with any other 
devices, does not overload the power circuits, wiring, and over-current 
protection. To determine the possibility of overloading the supply circuits, 
add together the ampere ratings from the nameplates of all devices 
installed on thesamecircuitsand compare thetotal with the rating limits 
for the supply circuits. 

■ Make sure that the power source circuits are properly grounded, then use 
the supplied power cord to connect the Switch 2000 to the circuit. Refer 
to the Safety and Regulatory Statements that follow the appendixes at the 
back of this manual. 

■ Do not install the Switch 2000 in an environment where the operating 
ambient temperature might exceed 55°C (131°F). 

■ Make sure the air flow around the sides and back of the switch is not 
restricted. 

■ If an HP J 3136A AdvanceStack Switch 2000 Redundant Power Supply is 
installed, make sure the air flow around the fan area of the RPS is not 
restricted. 
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Installing the Switch 

4. M ountthe Switch 

Rack or Cabinet Mounting 



Warning The rack or cabinet should be adequately secured to prevent it from 

becoming unstable and/or falling over. 

I nstall the Switch 2000 only on a tabletop or in an equipment rack or 
cabinet designed for this product. The Switch 2000 weighs a minimum 
of 17.3 lbs ( 7.86 kilos) with no interface modules or redundant power 
supply installed. Rack or cabinet mounting should be done by two 
people. If the rack or cabinet is empty, install the Switch 2000 at the 
bottom; if not, install the switch as close to the bottom as possible. If 
a lightweight device is already installed at the bottom, you may want 
to remove it, install the Switch 2000 at the bottom, then reinstall the 
lightweight device above the Switch 2000. If the Switch 2000 is 
mounted high, the rack or cabinet may become unstable and possibly 
fall over. 



1. As shown below, partially install one of the 5/8-inch number 12-24 screws 
in each rack upright. Install the screw in the upper hole of a close pair. 
(Some cabinets require number 10-32 screws instead, which are not 
included in the accessory kit.) 



Caution Make sure you have screws that fit your cabinet or rack before mounting the 

switch. 




Figure 1-5. Installing the Mounting Screws 



1-8 



Installing the Switch 

4. M ountthe Switch 



2. Using a Phillips cross-head screwdriver, attach the L-shaped mounting 
brackets to each side of the switch with four 10-mm M4screws (included 
in the accessory kit). 




Figure 1-6. Attach the Mounting Brackets 

3. Place the switch in the rack and lower it so the notches in the bottom of 
the bracket slide onto the screws you installed in step 1. Tighten these 
screws— be careful not to overtighten. 
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Installing the Switch 

4. M ount the Switch 




Figure 1-7. Install the Switch in the Rack 

4. Install the other two 5/8-inch 12-24 screws into the upper hole in each 
bracket. Tighten these screws— be careful not to overtighten. 



1-10 



Installing the Switch 

4. M ountthe Switch 

Table Mounting 

Place the switch on a table or other horizontal surface. (No special tools are 
necessary.) Attach the self-adhesive feet (included in the accessory kit) to the 
recessed areas on the bottom front area of the switch. Be certain to pick a 
sturdy tablein an uncluttered area. You may wantto securetheswitch'scables 
to the leg of the table to help prevent people from tripping over them. 



Caution Make sure the air flow around the sides and back of the switch is not restricted. 

Also, if an H P J 3136A AdvanceStack Switch 2000 Redundant Power Supply is 
installed, make sure the air flow around the fan area of the RPS is not 
restricted. 

Route the power cord(s) and data cables so that they will not create a tripping 
hazard for people walking in the area of the switch installation. 
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Installing the Switch 

5. Complete the Network Connections to the Switch 



5. Complete the Network Connections 
to the Switch 

Reconnect the switch to the power source. With the switch mounted, you are 
now ready to connect it to your network. Typical switch connections are: 

■ Switch-to-networked devices (i.e. computers, servers, and printers). 

■ Switch-to-hub 

■ Switch-to-switch 

■ Switch-to-router 

■ Switch-to-network backbones 



N ote For important information on connecting the Switch 2 OOO to other devices, 

refer totheConnecti vity Quick Reference that is shi pped with theopti onal 
HP AdvanceStack Switch 2000 modules and is alsoavai lableon the "HP 
AdvanceStack Product CD" shi pped with your switch. 

For other network design guidelines, refer to An I ntroduction to Ethernet 
LAN Switches and Designi ng Switched Networks, both of which are included 
on the HP AdvanceStack Product CD shipped with the Switch 2000. For 
physical topology guidelines, refer to Designing HP AdvanceStack Work- 
group Networks, available from HP authorized LAN dealers and also on the 
product CD shipped with your Switch 2000. 



Network connections to the Switch 2000 are through ports on the optional 
modules and transceivers installed in the switch. For connections to these 
ports, see the documentation you received with the specific module or 
transceiver, and to the Quick Referencementioned in the above note. 
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Installing the Switch 

5. Complete the Network Connections to the Switch 

Twisted-Pair Cascade Connections 

The lOBase-T ports on the optional HP J 3102A AdvanceStack Switch Ethernet 
Module are designed for MDI-X operation. This enables you to use a "straight- 
through" twisted-pair cable to connect to transceivers on computers and other 
devices having MDI (Media-Dependent Interface) requirements. For connect- 
ing cascaded hubs or switches having lOBase-T ports configured for MDI-X 
operation, use a crossover cable unless the cascaded hub or switch offers a 
port that you can switch between MDI and MDI-X operation (such astheHP 
AdvanceStack J 2610B lOBase-T Hub-8U). In this case, you can either set the 
port on the cascaded device to MDI operation and use a straight-through cable 
or set it to MDI-X operation and use a crossover cable. (For more information 
on cables and connectors, refer to appendix A.) 

Cable Management. The mounting brackets designed for the Switch 2000 
provide help for the problem of managing your network cables. Each bracket 
has a series of holes for attaching a cable tie to bundle network cables away 
from the switch. 




Figure 1-8. Cable Management 
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6. Connecta Console Device (Optional) 



6. Connect a Console Device (Opti onal) 

The Switch 2000 console interface enables you to use a PC or a terminal to do 
the following: 

■ Control password security 

■ Monitor switch and port statistics 

■ Modify the switch's configuration 

■ Use the switch's event log and command lineto help in troubleshooting 

■ Download new software 



N ote The Switch 2000 is shipped with a factory default configuration that enables 

operation as a multiport transparent bridge when installed in a network. For 
this operation, connecting a console device is unnecessary. However, for 
some of the other uses listed above, you will probably want to have console 
access. 



You can use either of the following methods for console access: 

■ Console RS-232 using either a direct or modem connection to a PC 
terminal emulator program, or a direct connection to an actual terminal 

■ In-Band using Telnet from a network management workstation. (To 
enable Telnet— or network management access— it is necessary to first 
use a direct-connector modem-connect console device to configure an IP 
address and subnet mask for the switch.) 

The Switch 2000 can simultaneously support one console session via the 
Console RS-232 port and one console session via Telnet. 



1-14 



Installing the Switch 

6. Connects Console Device (Optional) 

Direct Console Management, Using A Serial Cable and a 
Terminal or PC Terminal Emulator 

You can use either a PC emulating an ASCII terminal (such as the terminal 
application included with Microsoft Windows 3.1 or HyperTerminal with 
Windows 95) or an ASCII terminal. 

To directly connect a PC or terminal to a Switch 2000, follow these steps: 

1. Connect the PC or terminal to the switch's Console RS-232 port using an 
RS-232-C console cable (included). (If you need information on pin-outs 
and recommended cables, see appendix A, "Cables and Connectors") 




Figure 1-9. Connecting a PC or Terminal to the Console RS-232 Port 



2. Turn on the terminal or PC's power (and, if using a PC, start the PC 
terminal emulation program). For recommended parameter settings, refer 
to appendix C, "Sample Console Configurations". 

3. When you see this message: 

Waiting for speed sense. Press enter to continue. 
Press [Enter] , You will then see the Switch 2000's Main Menu. 
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Figure 1-10. The Main Menu 



4. If you want to continue with direct console management at this time, refer 
to chapter 2, "Using the Console Interface". 

RemoteConsoleManagementUsinga Modem and aTerminal 
or PC Terminal Emulator 



N ote For remote, console management, use a full -duplex, asynchronous (character- 

mode) modem. 



1. At the Switch 2000 site: 

a. Connect the modem to the Switch 2000's console port using an 
RS-232-C modem cable. (For pin-outs and recommended cables refer 
to appendix A, "Cables and Connectors".) 

b. If necessary, configure the modem to operate with the current con- 
figuration of the Switch 2000. (The modem's default configuration 
may be sufficient.) 

2. At the remote site, connect the terminal (or PC emulating a terminal) to 
the remote modem using a modem cable. Make sure the terminal and 
modems are functioning properly, then establish the link between the 
terminal's modem and the Switch 2000's modem according to the modem 
instructions. 
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PC (with Internal 
M odem) Running a 
Terminal Emulator 



Figure 1-11. Example of Remote Access via a M odem 



3. When you see this message: 

Waiting for speed sense. Press enter to continue. 
Press [Enter] , You will then see the Switch 2000's Main Menu. 

4. If you want to continue with direct console management at this time, refer 
to chapter 2, "Using the Console Interface". 
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Where To Go from Here 



Chapter 


Topics 
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monitor and manage switch operation 
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To monitor and analyze switch operation from the console 
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To download a new operating system or transfer a switch 




configuration 
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Troubleshooting information 


Appendixes 


To access the following: 




• A: Cable and connector information 




• B: Switch specifications 




• C: Sample console configurations 




• D: LED reference 




• E: Bootp information 




• F: M AC address management 




• Safety and Regulatory information 
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Using the Console Interface 



Overview 

This chapter describes the following features: 

■ Starting and ending a console session (page 2-2) 

■ The Main Menu (page 2-4) 

■ Screen structure and navigation (page 2-5) 

■ Using password security (page 2-7) 

■ Rebooting the switch (page 2-10) 

■ Resetting the switch (page 2-12) 

About the Console I nterface. The console interface enables you to recon- 
figure the switch and to monitor the switch status and performance. It consists 
of a series of management screens accessed through a menu-driven screen 
structure that begins at the Main Menu, and is organized as described in this 
section. 

The Switch 2000 offers two methods of access to the console interface: 

■ Console RS-232 (out-of-band) access: 

• Directly connected to the Console RS-232 port, using a serial cable 
and a PC running a terminal emulator or an actual terminal 

• Remotely connected to the Console RS-232 port, using modems and 
a PC running a terminal emulator or an actual terminal 

Refer to chapter 1, "Installation", for information on making RS-232 
hardware connections. 

■ In-Band access using Telnet from a PC or UNIX station on the network. 
This method requires that you first configure an IP address and subnet 
mask by using either out-of-band console access or Bootp. The Switch 
2000 allows one outbound and one inbound Telnet session to be running 
simultaneously. 

Console access can be limited by setting Manager-level and Operator-level 
passwords. 
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Starting and E nding a Console Session 



N ote This manual assumes that either a terminal device is already configured and 

connected to your Switch 2000 (as described in chapter 1, "Installation") or 
that you have already enabled Telnet access to the switch. (To enable Telnet 
access, refer to "Console Features" on page 3-16.) 



How To Start a Console Session: 

1. Start your PC terminal emulator, terminal, or Telnet session on a remote 
terminal device. 

2. Do one of the following: 

• If you are using Telnet, go to the next step. 

• If you are using a PC terminal emulator or a terminal, you should then 
see the following prompt: 

Waiting for speed sense. Press <enter> to continue. 

Note: If the consoledi splays a series of random and/or unread- 
able characters i nstead of the above prompt, the Baud Rate 
setti ngforthetermi nal may bedifferent from that of theconsole 
i nterface The switch's autosensi ng feature remedies this prob- 
lem when you press a key. 

Press [Enter] and go to the next step. 

3. The display then briefly displays a message indicating the baud rate at 
which theserial interface (Console RS-232 port) is operating, followed by 
the copyright screen. Do one of the following: 

If a password has been set, the Password prompt appears. Type the 
password and press [Enter] to display the Main Menu (figure 2-1). 

• If no password has been set, you will see this prompt: 

Press any key to continue. 

Press [Inter] to display the Main Menu (figure 2-1). 

If there is any system-down information to report, the switch displays it 
in this step and in the Event Log. 
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File Edit Settings Phone 



Event Log... 
Configuration . 
LOGOUT 



Terminal - SWITCH. TRM 



Transfers Help 

Demo_Config 



CONSOLE - MANAGER MODE 
Main Menu 



EE 



Rduanced Commands. 
Set Passwords . . . 

Download OS 

Reboot Switch 



Use arrow keys to change menu selection and <Enter> to execute selection. 



Figure 2-1. The Main Menu 

For a description of Main Menu features, refer to "Main Menu Features" on 
page 2-4. 

How To E nd a Console Session: 

1. If you have not made configuration changes in the current session, go to 
step 3. 

2. Configuration changes requiring a reboot of the switch are indicated by 
an asterisk (*) nexttotheconfigured item in theConfiguration menu. (See 
"RebootingTo Activate Configuration Changes"on page 2-11) If you have 
made configuration changes that require a reboot of the switch in order 
to take effect: 

a. Return to the Main Menu. 

b. Usethearrow keys(g,g,[TJ-and[TJ)tohighlightReboot Switch 
in the Main Menu and press [Enter] to reboot. 

3. Do one of the following: 

• If you have accessed the switch through a direct connection from a 
terminal device, exit from the terminal application. 

• If you have accessed the switch through Telnet or a modem connec- 
tion: 

i. Return to the Main Menu. 

ii. Highlight LOGOUT in the Main Menu and press [Enter] . 
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Main Menu Features 

The Main Menu (figure 2-1 on page 2-3) gives you access to these console 
interface features: 

• status and Counters: Displays information on the switch, 
individual ports, the address tables, protocols and spanning tree. 
(Refer to chapter 4, "Monitoring and Analyzing Switch Operation from 
the Console".) 

• Event Log: E nables you to read progress and error messages that 
are useful for checking and troubleshooting switch operation. A 
listing of Event Log messages is included on the CD shipped with your 
switch. (Refer to "Event Log" on page 4-16.) 

• configuration: Enables you to display thecurrent configuration 
settings and to reconfigure individual parameters. (Refer to chapter 
3, "Configuring the Switch".) 

• logout: Disconnects Telnet or modem access to theswitch. (Refer 
to "How To End a Console Session" on page 2-3.) 

• Advanced commands: Provides access to a set of system manage- 
ment, monitoring, and troubleshooting commands. (Refer to chapter 
6, "Using the Advanced Commands".) 

set Passwords: E nables you to set Operator and M anager pass- 
wordsto help restrict who has access to theconsoleinterface. (Refer 
to "Using Password Security" on page 2-7.) 

• Download os: E nables you to download a new software version to 
theswitch. (Refer to chapter 8,"F i leTransfers".) 

• Reboot Switch: Performs a software reboot, which is required (in 
some cases) to activate configuration changes that have been made. 
(Refer to "Rebooting To Activate Configuration Changes" on page 
2-11.) 
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Screen Structure and Navigation 

Console screens include these three elements: 

■ Parameter fields and/or read-only information such as statistics 

■ Navigation and configuration actions, such as Save, Edit, and Cancel 

■ Help banner to describe navigation options, and individual parameters 

For example, in the System configuration screen: 



Help banner 
describing the 
selected action 
(in this c ase, the 
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Actions-> 




Help describing each of the 
iter menu 



Use arrow keys to change action selection and <Enter> to execute action. 
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Figure 2-2. Elements of Screen Structure 
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Screen Structure and Navigation 

Table 2-1. How To Navigate in the Console 



Task: Actions: 

Execute an action from an Use either of the following methods: 
"Actions"-gmenu: a use the arrow keys ( g , g , , or g ) to 

highlight the action you want to execute, 

then press [Enter] , 

■ Press the key corresponding to the capital 
letter in the action name. For example, in a 
configuration menu, press (J]to begin editing 
parameter values. 

Reconfigure (edit) a parameter 1. Selecta configuration area, such as System. (See 
setting or a field: figure 2-2.) 

2. Press [e] (for Edit on the Actions line). 

3. Use [Tib] or the arrow keys(g,Q[TJ, or [TJ) to highlight 
the item or field. 

4. Do one of the following: 

• If the parameter has preconfigured values, use the 
Space bar to select a new option 

• If there are no preconfigured values, type in a value. 

5. If you want to change another parameter value, return to 
step 3. 

6. If you're finished editing parameters in the displayed 
screen, press [Enter] and do one of the following: 

• To save any configuration changes you have made (or 
if you have made no changes), press (s) (for the Save 
action). 

• To exitfrom the screen without saving any changes 
that you have made, press [c] (for cancel). 

Note: Some parameter changes are activated when you 
execute Save, and it is therefore not necessary to reboot 
the switch aftermaking these changes. Butif an asterisk 
appears next to any menu item you reconfigure, it is 
necessary to reboot the switch to implement the change. 
In this case, rebooting should be done after you have 
made all desired changes and then returned to the Main 
M enu. 

7. W hen you are finished editing parameters, return to the 
Main M enu. 

8. If necessary, reboot the switch by highlighting Reboot 
Switch and pressing [Enter] , (Refer to the Note, above.) 

Exitfrom a read-only screen. Press [T) (for the Back action). 
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Using Password Security 

There are two levels of console access: Manager and Operator. For security, 
you can set a password on each of these levels. 



Level Actions Permitted 

M anager: Access to all console interface areas. This is the default level. (That is, if a 
M anager password has notbeen setpriorto starting the currentconsole 
session, then anyone having access to the console can access any area of 
the console interface.) 

Operator: Access to the Status and Counters, Event Log, and minimal Configuration 
areas (System, Console, and Ports) for display only. 
Use of the LOGOUT command. 

On the Operator level, the Advanced Commands, Set Passwords, Download 
OS, and Reboot options are not available in the Main menu. 



To use password security: 

1. Seta Manager password (and an Operator password, if applicableforyour 
system). 

2. Exit from the current console session. A Manager password will now be 
needed for full access to the console. 

If you do steps 1 and 2, above, then the next time a console session is started, 
the console interface will prompt for a password. Assuming that both a 
Manager password and an Operator password have been set, the level of 
access to the console interface will be determined by which password is 
entered in response to the prompt. 

If you set a Manager password, you may also want to configure the 
Connection inactivity Time parameter in theSerial Link configuration 
screen (page 3-15). This causes the console session to end after the specified 
period of inactivity, thus giving you added security against unauthorized 
console access. (Once a Manager password is set and the console session is 
ended, access to the full console interface for any subsequent sessions 
requires the Manager password to be entered.) 
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Note 



If there is only a Manager password set (with no Operator password), and the 
Manager password is not entered correctly when the console session begins, 
the switch operates on the Operator level. 

If there are both a Manager password and an Operator password, but neither 
is entered correctly, access to the console will be denied. 

If a Manager password is not set, anyone having access to the console 
i nterfacecan operatetheconsolewithfull manager pri vi leges, regardless of 
whether an Operator password i s set. 

Passwords are case-sensitive. 

The rest of this section covers how to: 

■ Set a Password 

■ Delete a Password 

■ Recover from a Lost Password 



To set Manager and Operator passwords:. 

1. From the Main menu select Set Passwords. This screen appears: 
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Use arrow keys to change menu selection and <Enter> to execute selection. 



Figure 2-3. The Set Password Screen 

2. To set a new password: 

a. Select Set Manager Password or Set Operator Password. 
YOU will then be prompted with Enter new password. 
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b. Type a password of up to 16 characters and press [EmeF] , (Remember 
that passwords are case-sensitive.) 

c. When prompted with Enter new password again, retype the 
new password and press [Enter] , 

d. To set another password, return to step 2a. Otherwise, go to step 3. 
3. Select Return to Main Menu to exit from the Set Password screen. 

After a password is set, if you use LOGOUT or reboot or reset the Switch 2000, 
you will be prompted to enter the password to start a new console session. 

To Delete Password Protection ( I ncluding Recovery from a Lost 
Password) : This procedure deletes both passwords (Manager and Opera- 
tor). If you have physical access to the switch, press the Config Clear button 
to clear all password protection, then enter new passwords as described 
earlier in this chapter. If you do not have physical access to the switch, you 
will need the Manager password: 

1. Enter the console at the Manager level. 

2. From the Main menu select Set Passwords. You will then see the screen 
shown in figure 2-3. 

3. Select Delete Password Protection. You will then see the following 
prompt: 

Continue Deletion of password protection? No 

4. Press the Space bar or press (T) to select Yes, then press gmer) . 

5. Press [Enter] to clear the Password protection message. 

6. Select Return to Main Menu to exit from the Set Password screen. 

To Recover from a Lost Manager Password: 

If you cannot start a console session at the manager level because of a lost 
Manager password, you can clear the password by getting physical access to 
the switch and pressing and holding the Config Clear button for at least one 
second. 
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Rebooting the Switch 

Rebooting the switch terminates the current console session and performs a 
reset of the operating system. Some of the reasons for performing a reboot 
include: 

■ Activating certain configuration changes that require a reboot 

■ Activating port modules that have been changed since the last reboot. 
(That is, where a port module has been replaced with a different type of 
port module.) 

■ Resetting statistical counters to zero 

To Rebootthe switch, use the Reboot Switchoption in the Main menu. (If 
a Manager password has been previously set, Reboot switch appears only 
if this password is entered at the beginning of the console session.) 
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Use arrow keys to change menu selection and <Enter> to execute selection. 



Figure 2-4. The RebootSwitch Option in the Main Menu 
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Rebooting To Activate Configuration Changes. Configuration changes 
for some parameters become effective as soon as you save them. However, 
you must reboot the switch in order to implement any changes to any 
parameters in the following areas: 

■ IPX Service 

■ Internet (IP) Service 

■ Serial Link 

■ Console Parameters 

■ New VLAN Names 

■ System Parameters 

If configuration changes requiring a reboot have been made, the switch 
displays an asterisk next to the configuration menu item in which the change 
has been made. For example, if you change and save parameter valuesforthe 
switch's IP configuration, the need for rebooting the switch would be 
indicated by an asterisk appearing in the following screen: 



Asterisk indicates a 
configuration change 
that requires a reboot 
in order to take effect. 
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Figure 2-5. Example of a Configuration Change Requiring a Reboot 
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Resetting the Switch 

Resetting requires physical access to the front of the Switch 2000. There are 
two levels of reset: 

■ Hardware reset: Momentarily interrupts switch operation and performs 
a complete hardware self-test. This also clears the Event Log. 

■ Configuration reset: This is a drastic action that interrupts switch 
operation, clears any passwords, clears the event log, performs a com- 
plete self-test, and reboots the switch in its factory default configuration. 
You should consider performinga configuration resetonly if you want all 
configurable parameters reset to the factory default values. 

To perform a hardware or configuration reset: Refer to appendix D, 
"Switch Reference". Refer to the table on page D-5. 

Advanced Commands Features 

The Advanced Commands prompt enables you to perform advanced manage- 
ment, monitoring, and troubleshooting activities. Below is a command listing. 



Listing of Advanced Commands Available atthe Commands Prompt 



! 


Get (TFTP) 


Ping 


Time 


ClearLED 


Help 


Print 


Version 


Config 


History 


Put (TFTP) 


VLAN 


Date 


IPXPing 


Redo 


WalkMIB 


Delete 


LinkTest 


Repeat 


Zget 


Exit 


Log 


SetMIB 


Zput 


GetMIB 


Page 


Telnet 





Refer to chapter 6, "Using the Advanced Commands" for more on the com- 
mand prompt and on individual commands. 
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Overview 

This chapter provides an overview of the Switch 2000 configuration features. 

In its factory default configuration, the Switch 2000 automatically operates as 
a multiport learning bridge with network connectivity provided by the 
particular modules that you have installed. However, to "fine-tune" your 
switch for the specific performance and security needs in your network, you 
may choose to reconfigure certain switch parameters. 

Configuration Features. The Switch 2000 enables you to configure the 
following switch features. For information on individual configuration 
parameters, use the online Help provided with each configuration screen in 
the console user interface. 

■ System (page 3-5) 

■ Ports (page 3-6) 

■ IPX Service (page 3-7) 

■ Internet (IP) Service (page 3-9) 

■ Virtual LANs (VLANs) (page 3-19) 

■ IP Multicast (IGMP) Service (page 3-14) 

■ SNMP Communities (page 3-11) 

■ Trap Receivers (page 3-13) 

■ Serial Link (page 3-15) 

■ Console (page 3-16) 

■ Network Monitoring Port (page 3-20) 

■ Spanning Tree (page 3-17) 

■ Traffic/Security Filters (page 3-18) 

■ Automatic Broadcast Control (ABC) (page 3-23) 
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Overview 



N ote In the factory default configuration, the Spanning Tree Protocol (STP) is off. 

However, if the topology of your network includes any redundant loops 
between switches or bridges, you should enable STP. See "Spanning Tree" 
(page 3-17). 



To get Help on individual parameter descriptions. Inallscreensexcept 
the Advanced Commands screen there is a Help option in the Actions 
menu. Whenever the Actions menu is active, you can display Help for that 
screen's parameters by pressing (JfJ. (The Actions menu is active whenever 
any of the choices in theAction menu is highlighted.) For example: 
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Help and pressing [gjjer) 
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parameters listed in the upper 
part of the screen. 



Use arrou keys to change action selection and <Enter> to execute action. 



Figure 3-1. Example Showing How To Display Help 

To get Help on the actions or data fields in each screen: Use the arrow 
keys ( g, g, (T), or (T)) to select an action or data field. The banner under the 
action items will describe the currently selected action or data field. (For 
guidance in how to navigate in a configuration screen, see the instructions 
provided at the bottom of the screen, or refer to "Screen Structure and 
Navigation" on page 2-5.) 
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Configurable Features 



How To Access the Switch 2000 Configuration: Use this procedure to 
access the switch's configurable features. 

1. Begin at the Main Menu and select Configuration (figure 3-2): 
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Figure 3-2. Select "Configuration" in the M ain M enu 

After you select Configuration, the Configuration menu appears as 
shown in (figure 3-3). 
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Figure 3-3. The Configuration Menu 

2. Use the arrow keys ( Q, Q. (T), and (T) ) to highlight the configuration 
topic you want, then press [Enter] , 

3. Refer to the appropriate sections in the remainder of this chapter for 
information on configuring specific features. 
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System Features 

Configures basic switch management information, including system data, 
address aging, and time zone parameters: 
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System Contact : 
System Location : 

Address Age Interval (min) [5] : 5 

Time Zone [0] : 0 
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Use arrow keys to change action selection and <Enter> to execute action. 



Figure 3-4. The System Configuration Screen (Default Values) 



Note 



To help simplify administration, it is recommended that you configure 
System Name to a character string that is meaningful within your system. 

To set the time and date, set the Time Protocol parameters under "Internet 
(IP) Service F eatures" ( page 3-9) for your time server or use the time and date 
commands described in chapter 6. 
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Port Features 

Configures the operating state for each port and optionally assigns selected 
ports to a port trunk. (For more on port trunking, refer to chapter 7.) Also 
optionally enables you to restrict the amount of broadcast traffic on the port. 
The read-only fields in this screen display the port names and port types. 
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Use arrou keys to change action selection and <Enter> to execute action. 



Figure 3-5. Example ofthe Port Configuration Screen with 100VG and Ethernet 
Modules Installed in the Switch 

Port names are assigned by slot letter and port number. For example, if an HP 
J 3102A AdvanceStack Switch Ethernet Module is installed in slot B, then the 
four ports in this module are identified as ports Bl, B2, B3, and B4. Similarly, 
if an HP J 3103A AdvanceStack Switch 100VG M odule is installed inslotA,then 
the two ports in this module are identified as ports Al and A2. 



N ote Broadcast limit (the Beast Limit parameter) can be set for all ports in the 

switch (or VLAN, if VLANs are configured) from the Automatic Broadcast 
Control (ABC) screen (page 7-30 and following) if ABC is enabled. Setting the 
broadcast limit (Beast Limit) in the above screen is on a per-port basis and 
overrides any settings done in Automatic Broadcast Control. 
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IPX Service Features 

Enables the switch to be managed in an IPX network. The Switch 2000 
automatically enables IPX, configures the IPX node address, and learns the 
IPX network number. Thus, in the factory default configuration, IPX is auto- 
matically enabled for the switch. 



In this case, the factory-assigned node address is displayed as shown below. 
(The switch automatically detects the IPX network number.) 



File Edit Settings Phone Transfers Help 

DEFAULTCONFIG 

, ========================= _ cohSOLE - MANAGER MODE -= 

Configuration - IPX Service 

Node Address : 0G60b8— I5ddc3 




Actions-> Cancel Edit Saue Help 

jnm«iT»B!»i,i,ui,i,iLii4J,iJiT»Hjmn 



Use arrow keys to change field selection, <Space> to toggle field choices, 
and <Enter> to go to Actions. 



Figure 3-6. The IPX Service Configuration Screen 



If VLANs are configured, the above parameters appear in a horizontally 
formatted screen. 

You can also configurean IPX gateway frame encapsulation typeand gateway 
node so that the switch can be managed from a remote IPX network. 

If VLANs are configured, the switch can automatically learn the IPX network 
number of each attached VLAN. For more on VLANs, refer to chapter 7, 
"Advanced Concepts". 



Configuring the Switch 

Configurable Features 

(Optional) How To Configure I PX for Management from a Remote I PX 
Network. In the factory default, IPX is already enabled. If you want to 
enable management from a remote IPX network, you must configure the 
gateway encapsulation type and gateway node. 

1. From the Configuration screen, select IPX Service to display the above 
screen. 

2. Ifthe ipx Enabled parameter is not already set to "Yes" (thefactory 
default), then select this parameter and press the Space bar to select Yes. 

3. Select the Gateway Encap field and use the Space bar to select the 
appropriate gateway encapsulation for the gateway device. 

4. Press (T) to display and select the Gateway Node field. 

5. Type the IPX node address (MAC address) of the gateway device that is 
using the encapsulation defined in step 3. 

6. Press [ErniF] , then [~s| (for Save). 

7. Return to the Main Menu and reboot the switch. 
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Internet (IP) Service Features 

E nables you to configure: 

■ IP address, subnet mask, and (optionally) the gateway address for the 
switch so that it can be managed in an IP network 

■ The time server information (used if you want the switch to get its time 
information from another device operating as a Timep server) 

You can manually configure an IP address, subnet mask, and a Gateway IP 
address by setting the ip config parameter to Manual. Or, you can use 
Bootp to configure IP for the switch from a Bootp server. In this case you must 
also configure your Bootp server accordingly. If you plan to use Bootp, refer 
to appendix E, "Bootp Operation". Otherwise, set the ip Config parameter 
to Manual and then manually enter the IP address and subnet mask you want 
for the Switch 2000. 
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File Edit Settings Phone Transfers Help 



DEFAULT CDHFIG 



======- CONSOLE - MANAGER MODE -======= 

Configuration - Internet (IP) Service 



Tine Protocol Enabled [No] : Ves- 

Timep Seruer Address : 

Timep Poll Internal (min) [728] : 

IP Config [Use Bootp] : Manual 
IP Address : 18. 29. 280. 5 
Subnet Mask : 255 .255 .2ii8 . 0 
Gateway : 18.29.208.1 



una 



Edit the fields displayed aboue. 



Help 



- The default setting for Time 
Protocol Enabled is No. 
Setting itto Yes as shown 
here, then pressing [J] or [Tib) 
causes the Timep Server 
Address and Timep Poll 
Interval parameters to 
appear. For descriptions of 
these parameters, refer to 
the online Help for this 



Use arrow keys to change action selection and <Enter> to execute action. 



Figure 3-7. Example of the IP Service Configuration Screen 

I fVLANs are configured, then enable IP on a "per VLAN" basis. This is because 
each VLAN is a separate network and requires a unique IP address, plus a 
subnet mask. A gateway (IP) address is optional. For more on VLANs, refer 
to "Virtual LANs (VLANs)" on page 3-19 and in chapter 7, "Advanced Con- 
cepts". 
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How To Manually Configure for IP. 

1. From the Configuration screen, select internet (ip) Service to 
display the above screen. 

2. Press (T) (for Edit). 

3. Select the ip Config field and use the Space bar to select Manual. 

4. Selectthe ip Address field and enterthelP addressyou wantto assign 
to the switch. 

5. Selectthe Subnet Mask field and enter the subnet mask for the IP 
address. 

6. If you want to reach off-subnet destinations, select the Gateway field 
and enter the IP address of the gateway router. 

7. Press [ErniF] , then [~s| (for Save). 

8. Return to the Main Menu and reboot the switch. 
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SNMP Communities Features 

Enables you to add, edit, or delete SNMP communities. Use this feature if you 
expect to manage the switch from an SNMP management station. You can 
configure up to five SNMP communities, each with either an operator-level or 
a manager-level view, and either restricted or unrestricted write access. (For 
more on this topic, refer to chapter 5, "Using SNMP To Monitor and Manage 
the Switch", and to the online Help.) 
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File Edit Settings Phone Transfers Help 



EE 



Demo_Conf ig 



===- CONSOLE - MANAGER MODE -===== 
Configuration - SNMP Communities 



Community Nam 



MIB Uieu Write Access 




Figure 3-8. The SNMP Communities Screen (Default Values) 



Caution Deleting the community named "public" disables many network management 

functions (such as auto-discovery, traffic monitoring, and threshold setting). 
If security for network management is a concern, it is recommended that you 
change the write access for the "public" community to "Restricted". 



How To Configure for SNMP Communities. 

Ensure that the switch has been configured for IP and/or IPX. 

1. From the Configuration screen, select SNMP Communities to display a 
screen similar to the one above. 



3-11 



Configuring the Switch 

Configurable Features 



2. Press [a] (for Add) to display the following screen: 



File Edit Settings Phone Transfers Help 

DenoConf ig 



==- CONSOLE - MANAGER MODE -===== 
Configuration - SNMP Communities 




Ose arrow keys to change field selection, <Space> to toggle field choices, 
and <Enter> to go to Actions. 



Figure 3-9. The SNM P Add or Edit Screen 



N ote In the default configuration, no manager addresses are configured. In this 

case, all management stations using the correct community name may access 
the switch with the corresponding View and Access levels. If you want to 
restrict access to one or more specific nodes, you can enter up to ten IP and/ 
or IPX addresses of such nodes into the Manager Address field. Entering one 
or more IP or IPX addresses in the Manager Address field limits access to only 
those addresses. 



3. Enter the appropriate value in each of the above fields (use the (TaF) key 
to move from one field to the next). 

4. Press [ErniF] , then [~s| (for Save). 
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Trap Receivers Features 

Enables you to configure up to ten IP and/or IPX management stations (trap 
receivers) to receive SNMP trap packets sent from the switch. Trap packets 
descri be specific event types. (These events are the same as the log messages 
displayed in the event log.) The protocol, address, and community define 
which management stations receive the traps. An authentication trap is sent 
and the Security LED on the front panel of the switch begins flashing if a 
management station attempts an unauthorized access. (The ClearLE D 
command turns off the Security LE D— page 6-6.) Check the event log to help 
determine why the authentication trap was sent. (Refer to chapter 4 for 
information on the event log.) 
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DenoConf ig 



EE 



==- CONSOLE - MANAGER MODE -==== 
Configuration - Trap Receivers 



Send Authentication Traps [No] 
Protocol Address 



Community 



Events Sent in Trap 
None 



Actions-> nBOtTH Edit Saue Help 



Use arrou keys to change action selection and <Enter> to execute action. 



Figure 3-10. The Trap Receivers Configuration Screen (Default Values) 
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IP Multicast (IGMP) Service Features— Multimedia 
Traffic Control 

The IGMP (Internet Group Management Protocol) feature helps to reduce 
network congestion and improve security by reducing unnecessary multicast 
traffic on a per-port basis. This is useful in multimedia applications such as 
LAN TV, desktop conferencing, and collaborative computing, where there is 
multipoint communication; that is, communication from one to many hosts, 
or communication originating from many hosts and destined for many other 
hosts. In such multipoint applications, IGMP will be configured on the hosts, 
and multicast traffic will be generated by one or more servers (inside or 
outside of the local network). Switches in the network (such as the Switch 
800T or the B -version of the Switch 2000) can then be configured to direct the 
multicast traffic to only the ports where needed. 

In the factory default state (IGMP disabled), the switch forwards all IGMP 
traffic. When IGMP is enabled, you can configure the switch to any of the 
following states on a per-port basis: 

■ Automatic (the default): Causes the switch to interpret IGMP packets and 
to filter IP multicast traffic based on the IGMP packet information for that 
port. 

■ Blocking: Causes the switch to drop all IGMP transmissions received and 
block all outgoing IP Multicast packets for that port. 

■ Forwarding: Causes the switch to forward all IGMP and IP multicast 
transmissions through the port. 

For more information on IGMP and how to configure it, refer to "IP M ulticast 
(IGMP)" on 7-23. 
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Serial Link Features 

E nables you to adjust the Console RS-232 configuration to customize the 
connection with the PC, terminal, or modem you are using for console access. 
Refer to the online Help for information on modem settings. Refer also to 
"Console Features" on page 3-16. 
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- CONSOLE - MANAGER MODE -== 
Configuration - Serial Link 



Baud Rate [Speed Sense] : Speed Sense 

Flow Control [XON/XOFF] : XON/XOFF 

Connection Inactiuity Tine (min) [9] : 0 

Modem Connection Tine (sec) [68] : 120 

Modem Lost Receiue Ready Time (msec) [UBB] : iiflfl 

Modem Disconnection Time (sec) [1] : 1 



Actions-> fiBTBHB Edit Saue Help 



Ose arrou keys to change action selection and <Enter> to execute action. 



Figure 3-11. The Serial Link Configuration Screen (Default Values) 
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Console Features 

Lets you enable or disable inbound Telnet access and control the types of 
events displayed in the event log. Also specifies the terminal type and the 
console screen refresh interval used by the statistics screens (that is, the 
frequency with which statistics are updated on the statistics screens). 



N ote "lnbound"Telnet isTelnet access to the switch consolefrom another device. 

"Outbound'Tel net, which is using Tel net thro ugh the switch console to access 
another device, is always enabled as long as the switch has been configured 
with a valid IP address. (To configure an IP address for the switch, refer to 
"Internet (IP) Service Features" on page 3-9.) The switch supports one 
inbound and one outbound Telnet session simultaneously. 



Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 

DenoConf ig 
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CONSOLE - MANAGER MODE - 
Configuration - Console 



Inbound Telnet Enabled [Yes] : Yes - 
Terminal [UT1BB] : UT1BB 
Screen Refresh Interval (sec) [3] 
Displayed Events [All] : All 



Default Inbound 
Telnet Setting 



Actions-> riljnm^ Edit Saue Help 



Use arrou keys to change action selection and <Enter> to execute action. 



Figure 3-12. The Console Configuration Screen (Default Values) 
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Spanning Tree Features 

Enables you to activate the IEEE 802. Id Spanning Tree Protocol (STP) and to 
adjust spanning tree parameters. In the factory default, STP is off. Thus, if 
there are any redundant paths (loops) between nodes in your network, you 
should set the Spanning Tree E nabled parameter to Yes. This ensures that all 
redundant ports (those providing backup parallel connections) are in a block- 
ing state and not used to forward data. In the event of a topology change such 
as a switch, bridge, or data link failure, STP develops a new spanning tree that 
may result in changing some ports from the blocking state to the forwarding 
state. 

If VLANs are configured, then you can configure STP separately for each 
VLAN. 



Caution Because the switch automatically gives faster links a higher priority, the 

default STP parameter settings are usually adequate for spanning tree 
operation. Because incorrect STP settings can adversely affect network 
performance, you should avoid making changes without having a strong 
understanding of how STP operates. For more on STP, refer to chapter 7, 
"Advanced Concepts", and examine the IEEE 802. Id standard. 



The switch automatically senses port identity and type, and automatically 
defines port cost and priority for each type. The interface allows you to adjust 
theCostand Priority foreach port,aswell astheglobal STP parameter values 
for the switch. 

To configure STP, refer to "Spanning Tree Protocol (STP)" on page 7-2. 



3-17 



Configuring the Switch 

Configurable Features 



Traffic/Security Filter Features 

E nablesyou to control traffic and increase network security by creating filters 
based on any of the following criteria: 

■ Multicast address 

■ Source port only 

■ Source MAC address and source port 

■ Protocol frame type 

• IP (Ethernet or 802.3 SAP) 

• ARP 

• DECLAT 

• AppleTalk 

• SNA 

• NetBIOS 

• IPX (Ethernet or 802.3 SAP) 

• VINES IP or ECHO 

If you are using VLANs, they will affect source port and source MAC filter 
configuration. For more information on filtering, using filters with VLANs, and 
configuring filters, refer to "Filters and Security" on page 7-8. 
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Virtual LAN (VLAN) Features 

Enables you to create up to eight port-based VLANs. A VLAN is a group of 
ports designated by the Switch 2000 as belonging to the same broadcast 
domain. This feature enables you to configure port-based virtual LANs to help 
isolate broadcast traffic and increase security. Typically, if VLANs are used, 
all ports carrying traffic for a particular subnet address should be configured 
to the same VLAN. For more on when, why, and how to use VLANs, refer to 
"Virtual LANS (VLANs)" on page 7-14. 

In the factory default state, VLANs are not configured. All ports belong to the 
same broadcast/multicast domain. This domain is called "DEFAULT_VLAN" 
and appears in the "VLAN Names" screen. You can create up to seven addi- 
tional VLANs by adding new VLAN names, and then assigning one or more 
ports to each VLAN. (The switch acceptsa maximum of eight VLANs, includ- 
ing the default VLAN.) Note that each port can be assigned to only one VLAN. 
DEFAULT_VLAN can berenamed, but not deleted. Any ports not specifical ly 
assigned to another VLAN will remain assigned to DEFAULT_VLAN. 



N ote Before you delete a VLAN, you must re-assign its ports to another VLAN. 

When VLANs are used, and are managed from an SNMP workstation, you 
should configure the IPX and/or IP services for each VLAN. (Refer to pages 
3-7 and 3-9.) 

Spanning Tree protocol (STP), ABC, IGMP, and some other features operate 
on a "per VLAN" basis. This means you must configure such features sepa- 
rately for each VLAN in which you want them to operate. 



For more information on VLANs and how to configure them, refer to "Virtual 
LANs (VLANs)" on page 7-14. 
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Network Monitoring Port Features 

Lets you designatea portfor monitoring traffic on one or moreother ports or 
on a VLAN configured on the switch. This is accomplished by copying all 
traffic from the specified ports or VLAN to the designated monitoring port. 



Note 



If Automatic Broadcast Control (ABC) is configured and more than one port 
is being monitored, then broadcast packets may be duplicated on the monitor 
port. 



How To Configure for Monitoring: Thisproceduredescribesconfiguring 
the switch for monitoring when monitoring is disabled. (If monitori ng has 
already been enabled, thescreens wi II appear differently than shown i n this 
procedure.) 

1. Select Network Monitoring Port from the Configuration screen. 

2. In the Actions menu, press (T) (for Edit). 

3. If monitoring is currently disabled (the default) then enable it by pressing 
the Space bar (or (Y) ) to select Yes. 
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=======- CONSOLE - MANAGER MODE -=======. 

Configuration - Network Monitoring Port 



Monitoring Enabled [No] 



Enable Monitoring by 
Setting this Parameter 
to "Yes" 



Actions-> riETiTiErW Edit Saue Help 



Use arrow keys to change action selection and <Enter> to execute action. 



Figure 3-13. The Default Network Monitoring Configuration Screen 

4. Press (TJ to display a screen similar to the following and move the cursor 
to the Monitoring Port parameter. 
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Terminal SWITCH.TRM 
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EE 



DEFAULT COHFIG 



-======- CONSOLE - MANAGER MODE -======== 

Configuration - Network Monitoring Port 



Monitoring Enabled [No] 
Monitoring Port : 
Monitor : Ports 



Port 



Type 



A1 Ethernet 

A2 Ethernet 

A3 Ethernet 

A4 Ethernet 

B1 Ethernet 



Actions-> 



Port 



Type 



B2 Ethernet 

B3 Ethernet 

BU Ethernet 

D1 1 BBUG 

D2 1 BBUG 



Help 



Move the Cursor to 
the Monitoring Port 
Parameter 



Note: 

Ports listed in this 
screen depend on the 
modules currently 
installed in the switch. 



Bse arrow keys to change field selection , <Space> to toggle field choices , 
and <Enter> to go to Actions. 



Figure 3-14. Example of Selecting a M onitoring Port 

5. Press the Space bar to select which port to use for the monitoring port, 
then press TJ to move to the Monitor parameter. (The default setting 
is Ports, which you will use if you want to monitor one or more individual 
ports on the switch.) 

6. Do one of the following: 

• If you want to monitor individual ports, leave the Monitor param- 
eter set to Ports and press TJ to move the cursor to the Action 
column for the individual ports. Press the Space bar to select Mon- 
itor for each port that you want monitored. (Use TJ to move from 
one port to the next in the Action column.) When you are finished, 
press [Imirl , then press [s] (for save) to save your changes and exit 
from the screen. 

• If, instead of individual ports, you want to monitor all of the ports in 
a VLAN, press the Space bar to select vlan in the Monitor parame- 
ter, then press [TJ to move to the vlan parameter (figure 3-15). Then 
press the Space bar again to select the VLAN that you want to monitor. 
When you are finished, press [Emif] , then press (jTJ (for Save) to save 
your changes and exit from the screen. 

7. Return to the Main Menu. 
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Terminal SWITCH.THM 



File Edit Settings Phone Transfers Help 



DEFAULT CONFIG 



-======- CONSOLE - MANAGER MODE -======== 

Configuration - Network Monitoring Port 



Monitoring Enabled [No] 
Monitoring Port : A1 
Monitor : ULAN 
ULAN 




nctions-> 



Help 



Note: 

This screen appears 
instead of the one in 
figure 3- 14 if the 
Monitor parameter is 
settoVLAN. 




Figure 3-15. Example of Selecting a VLAN to Monitor 



N ote It is possible in networks with high traffic levels to copy more traffic to a 

monitor port than the link can support. In this situation, some packets may 
not be copied to the monitor port. 
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Automatic Broadcast Control (ABC) Features— Layer 3 
Switching 

ABC reduces the amount of IP and/or IPX broadcast traffic on a network by 
enabling the switch to serve as a proxy for the ultimate destination of broad- 
cast IP ARP and RIP packets, and IPX NSQ, and RIP or SAP packets. This 
reduces the number of ports over which IP and/or IPX broadcasts are sent, 
increases the amount of network bandwidth available for other purposes, and 
can reduce the need for routers within a network. These factors can lower 
costs and reduce latency in the network. (While communication between 
VLANs— broadcast domains— still requires a router, ABC functions within 
VLANsand, by using multiple subnets (multi-netting), can reduce or eliminate 
the need for routers within the VLAN.) 

When enabled, ABC also allows you to set the broadcast limit parameter 
(Beast Limit) in the Port Configuration screen (figure 3-5) for all ports on 
the switch (or all ports on the VLAN, if VLANs are configured and ABC is 
enabled for the VLAN). 

In the factory default state, ABC is disabled. For more information on ABC 
and how to configure it, refer to "Automatic Broadcast Control (ABC) "on page 
7-30. 
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Monitoring and Analyzing Switch Operation 
from the Console 



Overview 



The Main Menu in the switch's console interface gives you access to the 
following sources of read-only data for helping you to monitor, analyze, and 
troubleshoot switch operation: 

Table 4-1. Read-Only M onitoring and Analyzing Features 



Main Menu Data Type 
Item 



Purpose 



Status and Switch Information 

Counters 

M enus 

Port Status 
Port Counters 

Address (forwarding) Table 

Port Address Table 
Spanning Tree Information 

M odule Information 

IP Multicast (IGMP) Status 



Automatic Broadcast 
Control (ABC) Information 



Lists switch-level operating information. 

Displays the operational status of each port. 

Summarizes port activity. 

Lists the MAC addresses of nodes the switch has 
detected on the network, along with the 
corresponding switch port. 

Lists the M AC addresses thatthe switch has 
learned from the selected port. 

Lists Spanning Tree data for the switch and for 
individual ports. If VLANs are configured, reports 
on a per-VLAN basis. 

Lists the modules currently installed and detected 
by the switch. 

Lists IGM P groups, report, query, and type of 
device access on ports. If VLANs are configured, 
reports on a per-VLAN basis. 

If VLANs are configured, reports on a per-VLAN 
basis. 



Event Log 



Lists event messages generated by the switch. 
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Status and Counters M enu 



Status and Counters Menu 



Select status and Counters from the Main Menu to display the Status 
and Counters menu: 
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EE 



DEFAULT CONFIG 



CONSOLE - MANAGER MODE 
Status and Counters 



anna 



Switch Inf or nation . . . 
Port Status . . . 

Port Counters 

Address Table . . . 

Port Address Table 

Spanning Tree Information... 

Module Information 

IP Multicast (IGMP) Status... 

Automatic Broadcast Control (ABC) Infornation. 



msm 



Use arrou keys to change nenu selection and <Enter> to execute selection. 



Figure 4-1. The Status and Counters M enu 

Each of the above menu items accesses the read-only screens described on 
the following pages. Refer to the online help for a description of the entries 
displayed in these screens. 



Note 



Spanning Tree, IP Multicast (IGMP), and Automatic Broadcast Control (ABC) 
are reported on a per-VLAN basis. For these features you will be prompted to 
select a VLAN if multiple VLANs are configured. 
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Switch Information 
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DEFAULT CONFIG 



CONSOLE - MANAGER MODE 
Switch Information 



OS Uersion 



ROM Uersion 



JiXKXX. 03.01 



Up Tine 

CPU Util {%) 



2 inins 



Meinoro 



Total 
Free 



6,107,872 
5,678,2110 



Message - Total 
Buffers free 

Lowest 
Missed 



1UO 
121 
185 



Packet 
Buffers 



Total 
free 
Lowest 
Missed 



399 
368 
365 



IP Mgnt - Pkts Rx 
Pkts Tx 



IPX Mgnt - Pkts Rx 
Pkts Tx 



flctions-> rEffTB Help 
Use arrow keys to change action selection and <Enter> to execute action. 



Figure 4-2. Example of Switch Information 

This screen tells you which version of the OS (operating system) and ROM 
(low-level startup code located in read-only memory) the switch is using, and 
dynamically indicates how individual switch resources are being used. 



4-3 



Monitoring and Analyzing Switch Operation from the Console 

Status and Counters M enu 



Port Status 
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DEFflULTCONFIG 

,=========================- CONSOLE - MANAGER MODE - 

Port Status 



Port 


ID 


Type 


Media 


Enabled 


Status 




Mode 


m 




Ethernet 


Fiber 


Ves 


Op 


HalF 




02 


2 


Ethernet 


Fiber 


Ves 


Down 


Half 


Duplex 


no 


3 


Ethernet 


Fiber 


Ves 


Down 


Half 


Duplex 


04 


4 


Ethernet 


Fiber 


Ves 


Up 


Half 


Duplex 


01 


E 


Ethernet 


UTP 


Ves 


Down 


Half 


Duplex 


B2 


6 


Ethernet 


UTP 


Ves 


Up 


Half 


Duplex 


03 


7 


Ethernet 


UTP 


Ves 


Up 


Half 


Duplex 


04 


8 


Ethernet 


UTP 


Ves 


Down 


Half 


Duplex 



Actions-> fiffTirB Help 

Use up/down arrow keys to scroll to other entries, left/right arrow keys to 
change action selection, and <Enter> to execute action. 



Figure 4-3. Example of Port Status 

For each port, this screen tells you the type of port and media, whether the 
port is enabled and up or down, and the port's operating mode. (Included is 
the port ID number to use for SNMP MIB access.) 



4-4 



Monitoring and Analyzing Switch Operation from the Console 

Status and Counters M enu 



Port Counters 
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CONSOLE - MANAGER MODE 
Port Counters 



Port Total Bytes Total Franes 



Errors Rx 



Drops Tx 



02 
A3 
04 
B1 
B2 
B3 
B4 



191 ,758,722 
0 

5,918,787 
121 ,745 
0 



48.57B 
1422 



nctions-> m^BTB Show details Reset Help 



mm 



Use up/doun arrow keys to scroll to other entries, leFt/right arrow keys to 
change action selection, and <Enter> to execute action. 



Figure 4-4. Example of Port Counters 

This screen enables you to determine the traffic patterns for each port. Port 
Counter features include: 

■ Dynamic display of counters summarizing the traffic on each port since 
the last reboot or reset 

■ Option to reset the counters to zero (for the current console session). This 
is useful for troubleshooting. Refer to the Note, below. 

■ An option to display the I ink status, MAC address, and further port activity 
details for a specific port ( show details ). 



Note The Reset action resets the counter display to zero for the current session, 

but does not affect the cumulative values in the actual hardware counters. (In 
compliance with theSNMP standard, the values in the hardware counters are 
not reset to zero unless you reboot the switch.) Thus, using the Reset action 
resets the displayed counters to zero for the current session only. Exiting from 
the console session and starting a new session restores the counter displays 
to the accumulated values in the hardware counters. 
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To view the elements that comprise the traffic on a particular port, highlight 
that port number (figure 4-5), then select show details. For example, 
selecting port A4 displays a screen similar to figure 4-5, below. 







Terminal - SWITCH.TRM 




File Edit Settings 


Phone 


Transfers Help 








DEFAULTCONFIG 








- CONSOLE - MANAGER MODE -==== 
Port Counters - A4 










Link Status 


: Up 


MAC Address 


: 080009-cfeEbf 


Bytes Rx 
Unicast Rx 
Bcast/Mcast Rx 


: 0 
: 0 

: 2617 


Bytes Tx 
Unicast Tx 
Bcast/Mcast Tx 


: 537,898,752 
: e 

: 1,51 9, U96 


FCS Rx 

Alignment Rx 
Runts Rx 
Giants Rx 
Total Rx Errors 


: 0 
: 0 
: 0 
: 0 
: 0 


Drops Tx 
Collisions Tx 
Late Colin Tx 
Excessive Colin 
Deferred Tx 


: 0 
: e 
: 0 
: 1B 
: e 


Actions-> fiEBTB 


Reset Help 






Use arrow keys to 


change action selection and <Enter> to execute action. 



Figure 4-5. Example of the Display for Show details on a Selected Port 

This screen also includes the Reset action. Refer to the note on page 4-5. 



4-6 



Monitoring and Analyzing Switch Operation from the Console 

Status and Counters M enu 



Address Table 



File Edit Settings Phone 



Terminal - SWITCH.TRM 



Transfers Help 

DEFAULT CONFIG 



EE 



CONSOLE - MANAGER MODE 
Address Table 



MAC Address Located on 



B80BBc-73a201 B2 



0136 000- G000E10 E:3 

B86BDB -15ddc3 B3 

B8BBB9-1693B7 B2 

B8BBB9-228628 B2 

B8BBB9-3BB44B B2 

08 £1009-321 0J,5 E:2 

B80BB9-32F1de B2 

08 £1009-356683 B2 

B8BBB9-l|1d3n8 B2 

B8BBB9-Sa8E78 B2 



nctions-> m^BTB Search Next page Preu page Help 

Use up/down arrow keys to scroll to other entries, left/right arrow keys to 
change action selection, and <Enter> to execute action. 



Figure 4-6. Example of the Address Table 

This screen lets you easily determine which switch port is being used to access 
a specific device on the network. The listing includes: 

■ The MAC addresses that the switch has learned from network devices 
attached to the switch 

■ The port on which each MAC address was learned 

You can use the Search action at the bottom of the screen to locate a specific 
device (MAC address). 
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Port Address Table 

This screen lets you easily determine which devices are attached to the 
selected switch port by listing all of the MAC addresses detected on that port. 

You can use the search action at the bottom of the screen to determine 
whether a specific device (MAC address) is connected to the selected port. 

To use the port address table: 

1. Select Port Address Table from the menu in the Status and Counters 
screen. 



File Edit Settings Phone 



Terminal - SWITCH.TRM 



Transfers Help 

DEFflULTCONFIG 

- CONSOLE - MANAGER MODE 
Status and Counters 



Return to Main Menu 
Switch Information. . . 
Port Status... 

Port Counters 

Address Table . . . 

Port Address Table 

Spanning Tree Infornation 

Module Information 

IP Multicast (IGMP) Status... 

Automatic Broadcast Control (ABC) Information 



EE 



Use the Space bar to select the port for 
whichyouwanttodisplaytheaddresstal 



Select port : 



Use arrow keys to change menu selection and <Enter> to execute selection. 



Figure 4-7. Example of How To Access the Port Address Table 

2. When the Select Port prompt appears, press the Space bar to display 
the port you want to examine, then press [Inter] , (See figure 4-7, above.) 

Each port is identified by its slot letter and sequential port number in the 
slot. For example, port Al is the first port in slot A, while port D 4 is the 
fourth port in slot D. 
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File Edit Settings Phone 



MAC Address 



00000c-73a201 



0136 Ob 0- 001 d GO 
006 Ob 0- 045631 
006 0b0-1a6659 
006 0b0-1dl|158 
006 0b0-1e0250 
080009-02a9f1 
080009-0619ed 
080009-OabSac 
08 £1009- Baf 8 £19 
080009-0f6bac 

ftctions-> m^BTB 

mm 



Terminal - SWITCH.TRM 



Transfers Help 

DEFAULTCONFIG 

- CONSOLE - MANAGER MODE - 
Port Address Table - B2 



EE 



In this example, several M AC addresses 
accessed through port B2 appear in the 
initial listing. To view any additional 
addresses thatmaybe in the listing, use 
the Next page action. 



Next page 



Preu page 



Help 



Use up/down arrow keys to scroll to other entries, left/right arrow keys to 
change action selection, and <Enter> to execute action. 



Figure 4-8. Example of a Port Address Table for a Specific Port 
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Spanning Tree (STP) Information 



N ote If multiple VLANs are configured on the switch, you will be prompted to select 

a VLAN (by using the Space bar, then pressing [Enter] ) to display this screen. 





Terminal - SWITCH.TRM MEl 


File Edit Settings Phone 


Transfers Help 




DEFAULTCONFIG 




- CONSOLE - MANAGER MODE -=========================== 




Spanning Tree 


STP Enabled 


Ves 


Switch Priority 


32,768 


Hello Tine 


2 


Max Age 


20 


Foward Delay 


15 


Topology Change Count 


2 


Tine Since Last Change 


1 sees 


Root MAC Address 


08G009-cfe5bf 


Root Path Cost 


0 


Root Port 


This switch is root 


Root Priority 


32768 


Actions-> fiffTirB Show ports Help 




Use arrow keys to change action selection and <Enter> to execute action. 



Figure 4-9. Example of Spanning Tree Information 

Use this screen to determine current switch-level STP parameter settings and 
statistics. 
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You can use the show ports action at the bottom of the screen to display 
port-level information and parameter settings for each port in the switch 
(including port type, cost, priority, operating state, and designated bridge). 



Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 



EE 



DEFBULTCBNFIG 

===- CONSOLE - MANAGER MODE -===== 
Spanning Tree - Port Information 



Type 



Cost Priority 



Designated Bridge 



B2 Ethernet 108 
B3 Ethernet 100 
B4 Ethernet 100 



080009-cfeEbf 



128 Forwarding 080009-cf e5bf 
128 Forwarding 080BB°-cFeSbF 
128 Blocking 080BB9-cFe5bF 



Actions-> FiFffflB Help 

Use up/doun arrow keys to scroll to other entries, left/right arrow keys to 
change action selection, and <Enter> to execute action. 



Figure 4-10. Example of STP Port Information 



Caution Because incorrect STP settings can adversely affect network performance, 

you should avoid making changes without having a strong understanding of 
how STP operates. For more on STP, refer to "Spanning Tree Protocol (STP)" 
on page 7-2. 
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Module Information 



File Edit Settings Phone 



Terminal - SWITCH.TRM 



Transfers Help 

DEFflULTCONFIG 

- CONSOLE - MANAGER MODE 
Module Information 



EE 



Module Type 



Module Description 



Ethernet-16 
10BT 
10BUG 
FDDI 



4-port Ethernet module 
2-port 100BaseT nodule 
2-port 100UG nodule 
1-port FDDI nodule 
Slot Available 



nctions-> m^BTB 

mm 



Help 



Use up/down arrow keys to scroll to other entries, left/right arrow keys to 
change action selection, and <Enter> to execute action. 



Figure 4-11. Example of M odule Information 

This screen tells you which type of module the switch detects in each slot. 
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IP Multicast (IGMP) Status 



N ote If multiple VLANs are configured on the switch, you will be prompted to select 

a VLAN (by using the Space bar, then pressing [Enter] ) to display this screen. 



This screen identifies the active IP multicast groups the switch has detected, 
along with the number of report packets and query packets seen for each 
group. It also indicates which port is used for connecting to the querier. 



Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 

DEFAULTCONFIG 

==========================- CONSOLE - MANAGER MODE -============ 

IGMP Status 

flctiue Group Addresses Reports Queries Querier Access Port 
227.111.122.122 3B 29 A2 



EE 



Actions-> ITffTirB Show ports Help 



mm 



Use up/down arrow keys to scroll to other entries, left/right arrow keys to 
change action selection, and <Enter> to execute action. 



Figure 4-12. Example of IGM P Status Screen 
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You can also display the port status of the individual multicast groups. (That 
is, you can display the ports, port types, and whether the IGMP devices 
connected to the switch via the port are hosts, routers, or both.) To do so, 
select the group from the above screen and press (¥) for_show ports. For 
example, suppose you wanted to view the status of the IP multicast group 
227.111.122.122 shown in the above screen. You would highlight the row 
beginning with that group number, then press (T). You would then see a screen 
similar to the following: 



Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 



EE 



DEFAULT CONFIG 



CONSOLE - MANAGER MODE 
IGMP Status 



Active Group Addresses: 227.111.122.122 
Port Type Access 

A1 10/100TX Host 
A3 10/100TX Host 
Bt 10/100TX Host-Router 



Actions-> Back Help 

use up/down arrow keys to scroll to other entries, left/right arrow keys to 
change action selection, and <Enter> to execute action. 



Figure 4-13. Example of an IGM P Status Screen for a Selected Multicast Group 
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Automatic Broadcast Control (ABC) Information 



N ote If multiple VLANs are configured on the switch, you will be prompted to select 

a VLAN (by using the Space bar, then pressing [Enter] ) to display this screen 



This screen displays the number of IP ARP and IPX NSQ replies sent per port 
and whether RIP and SAP packets are being forwarded or not forwarded per 
port. If VLANs are configured, this data is on a per-VLAN basis. 



Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 

DEFAULT CONFIG 



EE 



Type 



==========- CONSOLE - MANAGER MODE -=========== 

Automatic Broadcast Control (ABC) Information 



ARP Replies IPS Replies IP RIP Control IPS RIP/SAP Control 




B2 Ethernet 
B3 Ethernet 
B4 Ethernet 



HEBG3 



BEBEJ 



Not_Forwarding Forwarding 
NotFor war ding NotForwarding 
Forwarding Forwarding 



Actions-> ITffTirB Help 

Use up/down arrow keys to scroll to other entries, leFt/right arrow keys to 
change action selection, and <Enter> to execute action. 



Figure 4-14. Example of Automatic Broadcast Control (ABC) Screen 
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Event Log 

The Event Log records operating events as single-line entries listed in chrono- 
logical order. Each entry is composed of five fields: 

Severity Date Time System Module Event Message 



t t 




I 08/05/96 10:52:32 ports: port 1 enabled 

Severity is one of the following codes: 

i (information) indicates routine events. 

w (warning) indicates that a service has behaved unexpectedly. 

c (critical) indicates that a severe switch error has occurred. 

d (debug) reserved for HP internal diagnostic information. 

Date is the date in mm/dd/yy format that the entry was placed in the log. 

Time is the time in hh:mm:ss format that the entry was placed in the log. 

System Module is the internal module (such as "ports" for port manager) that 
generated the log entry. If VLANs are configured, then a VLAN name also 
appears for an event that is specific to an individual VLAN . 

Event Message is a brief description of the operating event. 
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E ntering and Navigating in the Event Log Display. To enter the event 
log, select Event Log from the Main menu. 



L3 



Terminal - SWITCH .TRM 



File Edit Settings Phone Transfers Help 



DEFAULT CONFIG 



==========================- CONSOLE - MANAGER NODE -==================== 

I 05/01/97 11:45:22 chassis: Power Supply OK: Supply: HPS, Failures: 0 

I 05/81/97 11:45:22 stp: Spanning Tree Protocol enabled 

I 05/01/97 11:U5:22 ip : entity enabled 

I 05/01/97 11:45:22 ipx: entity enabled 

I 05/01/97 11:45:22 tf tp : entity enabled 

I 05/01/97 11:45:22 bootp: entity enabled 

I 05/01/97 11:45:22 tcp: configuration complete 

I 05/01/97 11:45:22 tcp: entity enabled 

I 05/01/97 11:45:23 telnet: Inbound telnet enabled 

I 05/01/97 11:45:23 telnet: Outbound telnet enabled 

I 05/01/97 11:45:23 system: System Boated. 

I 05/01/97 11:45:24 console: connection established 

I 05/01/97 11:45:26 mgr: SNE CONSOLE Session MANAGER Mode established 

Log euents stored in memory 171-270. Log events on screen 25JJ-270. 

Actions->/" nfWM Next page / P_reu page End Help 




Use u 
change 



arrow scroll log one line, leFt/right arrow keys 
Action selection, and <tnter> to execute action. 



to 



Log Status Line Range of Events in the Log Range of Log Events Displayed 



Figure 4-15. Example of an Event Log Display 



To display various portions of the Event Log, either preceding or following 
the currently visible portion, use either the actions listed at the bottom of the 
display (Next page, Prev page, or End), or the keys described in the 
following table: 

Table 4-2. Event Log Control Keys 



Key Action 



m 


Advance the display by one page (next page). 


LD 


Roll back the display by one page (previous page). 


LD 


Advance display byone event(down one line). 


LD 


Roll back display by one event (up one line). 


LD 


Advance to the end of the log. 




Display Help for the event log. 
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The event log holds up to 100 lines in chronological order, from the oldest to 
the newest. Each line consists of one complete event message. Once the log 
has received 100 entries, it discards the current oldest line each time a new 
line is received. The event log window contains 20 lines and can be positioned 
to any location in the log. 

The log status line at the bottom of the display identifies where in the sequence 
of event messages the display is currently positioned. 

The event log will be erased if any of the following occurs: 

■ The switch is reset using the Reset button. 

■ Power to the switch is interrupted. 

■ A new operating system is downloaded to the switch. 

(The event log is not erased by using the Reboot Switch command in the 
Main Menu.) 
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Using SNMP To Monitor and Manage the 
Switch 



You can manage the switch via SNMP from a network management station. 
(The switch supports SNMP vl and SNMP v2c, except as noted below for 
SNMP v2 Notifications.) If you are using IP, you must either configure the 
switch with the appropriate IP address or, if you are using Bootp to configure 
the switch, ensure that the Bootp process provides the IP address. (The IPX 
address is automatically configured.) If multiple VLANs are configured, each 
VLAN interface should have its own IP or IPX network address. This chapter 
provides an overview of SNMP managementfor the switch and describes the 
configuration process for the various features. For parameter-specific infor- 
mation, refer to the Help provided in the individual configuration screens. 

SNMP Management 

SNMP management features on the switch include: 

■ Security via configuration of SNMP communities 

■ Event reporting via SNMP traps and RMON (SNMP v2 Notifications are 
not supported at this time.) 

■ Managing the switch with a network management tool such as HP 
AdvanceStack Assistant 

■ Monitoring data normally associated with the SNMP agent ("Get" 
_operations). Supported Standard MIBs include: 

• Bridge MIB (RFC 1493) 

• Etherlike MIB (RFC 1650) 

• Ethernet MAU MIB (RFC 1515) 

• Interfaces Evolution MIB (RFC 1573) 

• Novell Standard IPX MIB (ipx.mib) 

• RMON MIB (RFC 1757)-etherstats, events, alarms, and history 

• SNMP MIB-II (RFC 1213) 
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HP Proprietary M IBs include: 

• Statistics for message and packet buffers, tcp, telnet, and timep 
(netswtst.mib) 

• Port counters, forwarding table, and CPU statistics (stat.mib) 

• tftp download (downld.mib) 

• 802.12 (100VG) information (vg.mib) 

• Integrated Communications Facility Authentication Manager and 
SNMP communities (icf.mib) 

• HP AdvanceStack Switch 2000 configuration (config.mib) 

• HP VLAN configuration information (vlan.mib) supporting 
hpVlanGeneralGroup 

• HP EASE M I B version 4to allow EASE sampling 

• HP Linktest M I B for basic device management (linktest.mib) 

• HP ICF Linktest MIB for link test features (icfbasic.mib) 

The switch SNMP agent also uses certain variables that are included in a 
Hewlett-Packard proprietary MIB fileyou can add to theSNMP database 
in your network management tool. You can copy the MIB file from the 
compact disk (CD) shipped with the switch, or from folio wing World Wide 
Web site: 

http : //www. hp . com/go/network_city 

For more information, refer to the card at the front of this manual. 
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SNMP Configuration Process 

The general steps to configuring for SNMP access to the preceding features 
are: 

1. From the Main menu, select Configuration. 

2. Enable and configure an IP address for the switch, including any neces- 
sary gateways. An IPX address is automatically configured. (For more on 
configuring IPX and IP, refer to page 3-7 and page 3-9.) 

3. Configure the appropriate SNMP communities. (The "public" community 
exists by default and isused by HP's network managementapplications.) 
(For more on configuring SNMP communities, refer to page 3-11.) 

4. Configure the appropriate trap receivers. (For more on configuring trap 
receivers, refer to page 3-13.) 

In many networks, manager addresses are not used. In this case, all manage- 
ment stations using the correct community name may access this device with 
the View and Access levels that have been set for that community. If you want 
to restrict access to one or more specific nodes, you can enter up to 10 IP and/ 
or IPX addresses of such nodes into the Manager Address field. Configuri ng 
one or morel P or I PX addresses i n the Manager Address field means that 
only the network management stati ons at those addresses areauthori zed to 
use the community name to access the switch. 



Caution Deleting the community named "public" disables many network management 

functions (such as auto-discovery, traffic monitoring, and threshold setting). 
If security for network management is a concern, it is recommended that you 
change the write access for the "public" community to "Restricted". 



N ote SNMP community and trap receiver configurations are activated when saved. 

Rebooting the switch is not necessary unless you have also configured other 
parameters that require rebooting in order to be activated. (For more on when 
it is necessary to reboot, refer to "Rebooting the Switch" on page 2-10.) 



5-3 



6 



Using the Advanced Commands 



Overview 

The Advanced Commands , which are accessed from the Main Menu, gives 

you access to the following system management commands: 

■ Help 

■ Date 

■ Time 

■ History 

■ Ping 

■ IpxPing 

■ LinkTest 

■ Telnet 

■ VLAN 

■ ClearLED 

■ Config 

■ Delete 

■ GetMIB 

■ SetMIB 

■ WalkMIB 

■ Exit 

■ Get/Put (TFTP) 

■ ZGet/ZPut(ZMODEM) 

■ Version 

■ Log 
a 

■ Repeat 

■ Page 

■ Print 

■ Redo 
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How To Use the Command Prompt: 

1. To access the command prompt, use the arrow keys to highlight Advanced 
Commands in the Main Menu and press [Emir] . 



File Edit Settings Phone Transfers Help 



Demo_Config 



CONSOLE - MANAGER MODE 
Main Menu 



Advanced Commands. 
Euent Log... Set Passwords... 

Configuration... Download OS... 

LOGOUT Reboot Switch 



Selec 



tthe Command Prompt 




Figure 6-1. Selecting the Command Prompt 

2. Do the following: 

• If there are no VLANs (virtual LANs) configured, go to step 3. 

• If VLANs are configured, the prompt displays the name of the default, 
or first VLAN, then asks you to select the VLAN in which to operate. 
Use the Space bar to select the VLAN in which you want to operate, 
then press [Ernifj 

3. Thecommand prompt appears near the bottom of the screen. The text in 
the prompt matches the System Name parameter. (If there are multiple 
VLANs configured, then the text in the prompt matches the name of the 
VLAN in which the command prompt is operating.) For example, in the 
factory default configuration (no system name or VLANs configured), the 
command prompt looks like this: 

DEFAULT_CONFIG : 

4. Type in the command you want to execute and press [Emir) . For example, 
to set the time to 9:55 a.m. you would execute the following command: 

DEFAULT_CONFIG: time 9 : 55 [Entif] 
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How To Exit from the command prompt: 

Type exit and press [Enter] to return to the Main Menu. 



How To List Available Commands: 

At the command prompt, type h and press [Enter] , 

When you see — more — at the bottom of the screen: 

■ To advance the display one line at a time, use [Inter] , 

■ To advance the display one screen at a time, use the Space bar. 

How To Stop the Help Listing: Press (oj. 
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Commands 

To execute any of these commands, select Advanced Commands from the 
Main Menu, type the command, and press [Enter] , 

Conventions: 

■ Commands are shown in the normal typeface. 

■ Required parameters are shown in italics. 

■ Optional parameters are shown in italics, with brackets ( [ ...] ). 

For example: 

Command Required Parameters Optional Parameters 

ping ip-addr [repetitions] [timeout] 



Command Syntax 


Description 


H (help) 


Lists the commands available atthe command prompt. 


date [mm/dd/yy] 


Without parameters, displays the date and time currently held by the switch. 




W ith parameters in the month/date/year format, resets the date. 


time [hh:mm:ss] 


Without parameters, displays the date and time currently held by the switch. 




With parameters in the hours:minutes:seconds format, resets the time. 


history 


displays the times and reasons for the lastfour occasions on which the switch 




was rebooted or restarted. 



ping ip-addr [repetitions] [timeout] 
where: 

ip-addr is the I P address of the 
target node in dotted decimal 
notation. 

repetitions is the number of 
times to repeat the echo request. 
Default: send packetonce. 

timeout is how many seconds to 
wait for a response. 
Default: 5 seconds. 



Sends an Internet Control M essage Protocol (I CM P) echo request message 
to a specific IP address, as a network-layer test of the reachability of the node. 
Ping does not support loopback (pinging this switch) or broadcast addresses. 
The switch must have IP configured. After transmitting the request message 
to the node, the switch waits for a response. If it is received within the 
specified or default timeout interval, the console displays a message 
indicating that the target is "alive". If an echo response is not received within 
the specified or defaulttimeout interval, the console displays a message 
indicating thatthe targetdid notrespond. 

VLANs: If multiple VLANs are configured, the Ping command sends requests 
to the ports in the VLAN environmentspecified when the command prompt 
was selected. 



6-4 



Using the Advanced Commands 

Commands 



Command Syntax 



Description 



i pxp ing ipx-addr [ repetitions ] [timeout] 

[size] 
where: 

ipx-addr\s the IPX address of the 
target node in this format: 

network number :mac address 

repetitions is the number of 
times to repeat the echo request. 
Default: send packetonce. 

timeoutis how many seconds to 
wait for a response. 
Default: 5 seconds. 



Sends an IPX echo request message to a specific IPX address, as a network- 
layer test of the reachability of the node. The switch must have IPX enabled. 
After transmitting the request message to the node, the switch waits for a 
response. If it is received within the specified or defaulttimeout interval, the 
console displays a message indicating that the target is "alive". If an echo 
response is notreceived within the specified or default timeout interval, the 
console displays a message indicating thatthe target did not respond. 

VLANs: If multiple VLANs are configured, ipxping sends requests to the ports 
in the VLAN environmentspecified when the command promptwas selected. 



size is the size in bytes of the data to be 
sent. 

Default: 40 bytes. 



linktest mac _addr [count] [delay] 
where: 

mac_addr\s the MAC address of 
the target node in 12-character 
hexadecimal format. 

count 'is the number of test 
packets to send. 
Default: 1 packet 

delay is how many seconds to 
wait for a response to each packet. 
Default: 2 seconds. 



Verifies communication to a MAC address on the LAN. Sends an 802.2 Test 
Packet to a specific targetnode on a network in the VLAN environment 
specified in the command prompt. The targetnode mustbe able to respond 
to an 802.2 Test Packetwith an 802.2 Test Response packet in orderforthe 
test to work. (HP managed hubs, bridges, routers, and switches automatically 
respond to 802.2 Test Packets. M ost HP LAN adapters can be configured to 
operate as a responder. 



VLANs: If multiple VLANs are configured, the linktest command sends 
requests to the nodes in the VLAN environmentspecified when the command 
promptwas selected. 



telnet ip-addr 
where: 

ip-addr is the IP address of the target 
node in dotted decimal notation. 



Used to establish a Transmission Control Protocol (TCP) virtual terminal 
connection to a remote node, a How ing you to interact with the remote node's 
interface. IP mustbe configured, and the remote node musthave Telnet 
service enabled. The Switch 2000 supports one inbound and one outbound 
Telnet session. In the factory default configuration, the inbound Telnet 
Enabled parameter is setto Yes. (To change the Inbound Telnet Enabled 
parameter, use the Console configuration screen, which is accessed from the 
Configuration screen selected from the M ain menu.) Outbound Telnet is 
always enabled. To exit from an inbound Telnet session, select logout from 
the M ain menu and answerthe confirmation prompt by typing y.To exit from 
an HP router, another Switch 2000, or a UNIX login, press [ctM)[rT|. To force a 
disconnection from any device, use [ctH][R].To interrupt command processing 
without halting an outbound Telnet session, use [ctn] [c]. 
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Command Syntax 



Description 



vlan vlan_name 
where: 

vlan_name is the name of the 
virtual LAN you wantto access. 



Used where VLANs are configured. Used to select a differentVLAN 
environment in which to execute Command Prompt commands. The command 
prompt will change to show the VLAN name specified by the vlan_name 
parameter. 



clearled 



Turns off the Security LED on the front panel of the Switch 2000. 



config 



Displays the configuration currently saved in flash memory. When 
- more - is displayed, pressing [Enter] displays the next line of the 
configuration, and pressing the Space bardisplays the nextscreen of the 
configuration. To halt a config listing and return to the command line prompt, 
press [q]. 



delete 



Deletes the configuration file currently in use, returns the switch to its factory 
default configuration, and reboots the switch. 



getmib objectname.index 
where: 

objectname identifies the M IB 
object by name or number format. 

index identifies the instance of 
each objectname. 



Retrieves the value of an individual M IB object in the switch. 

Example: The following command returns the enable/disable status for a port 
having a port ID of 1. (For an example of port ID numbering, see the example 
of the Port Status screen on page 4-4.) 

getmib ifAdminStatus.l 



setmib objectname.index type value Sets a M IB objectto a specific value. Valid types are: 
where: 

objectname identifies the M IB 
object by name or number format. 

index identifies the instance of 
each objectname. 



type 



value identifies the numeric value for 
the M IB object. 



-i (integer) 
-o (octet) 

-d (object identifier) 
-a (ip addr) 
-c (counter) 



-g (gauge) 

-t(time_ticks) 

-u (unsigned integer 32) 

-D (Display String) 

-N (NULL) 



Example: This command sets portlto disabled status, 
setmib ifAdminStatus.l -i 2 
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Commands 



Command Syntax 



Description 



walkmib objectname 



Retrieves the M IB subtree for the specified M IB object. When - more - 
is displayed, pressing [Enter] displays the next line of the configuration, and 
pressing the Space bar displays the next screen of the configuration. To halt 
a walkmib listing and return to the command line prompt, press (o). 

Examples: 

walkmib ifSpeed displays the speed for each port installed in the switch, 
walkmib ifPhysAddress displays the MAC address of each port installed 
in the switch. 



exit 



Returns you to the M ain M enu. 



get ip-addr config filename 
get/px-acfcfrconfig filename 

where: 

ip_addror ipx-addr is the IP or IPX 
address of the file server. 

filename is the directory path and 
name of the file containing the 
configuration. 



Uses TFTP to transfer a configuration from a TFTP server on an attached 
network. The switch must have IP or IPX configured, and the configuration 
must have been previously transferred from a switch to the file server. TFTP 
must be enabled on the server. 

Progress of the transfer, plus successful or unsuccessful completion of the 
transfer are indicated in the Event Log. 

Note: After transferring a configuration to the switch, the switch 
automatically reboots to invoke the new configuration. 



put ip-addr object filename 
put ipx-addr object filename 

where: 

ip_addror ipx-addr is the IP or IPX 
address of the remote host. 

object ls config, crashrec, or a 
command that generates an output 
thatcan be stored in a file. 

filename is the directory path and 
name of the configuration file on 
the remote host. 



Uses TFTP to transfer a configuration, a "crash record", or the output of a 
command from the switch to a file on a remote host. The switch musthave IP 
or IPX configured. TFTP must be enabled on the remote host. The targetfile 
on the remote host must also exist and have write permissions. A command 
used as an ob/'ecrmusthave an outputthatcan be stored in a file. 

Progress of the transfer, plus successful or unsuccessful completion of the 
transfer are indicated in the Event Log. 

Note: W hen the sw itch reboots itself due to an internal error, a "crash record" 
(crashrec) is generated. This is a binary file holding internal data needed to 
troubleshootthe cause of the internal error. 



zgetCONFIG [remote- file] [dos/unix] 
where: 

remote-file is a file name on the 
console PC. 



Copies a switch configuration from a file on the console PC to the switch. The 
PC must be emulating a VTlOOor ANSI terminal. Also, the PC must be running 
aZmodem-compatibleterminalemulationprogramsuchas PROCOM M PLUS. 



dos = 0 (spec ifies DOS format) 
unix = 1 (spec ifies unix format) 
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Commands 



Command Syntax 


Description 


zput file remote-file overwrite dos/unix 


Copies a switch configuration from the switch to the console PC. The PC must 


where: 


be emulating a VT100 or ANSI terminal. Also, the PC must be running a 


file is CONFIG or a command. 


Zmodem-compatible terminal emulation program such as PROCOM M PLUS. 


remote-file is a file name on the 




console PC. 




overwrite is: 




0 (don't overwrite a file of the 




same name). 




1 (create or overwrite a file of 




the same name). 




dos = 0 (spec ifies DOS format) 




unix = 1 (sner ifies unix forma \) 

UMJA X ^ D VJ \- V_ 1 1 1 V_ D UIMA IWI 1 1 IU L/ 




Vpr^ inn 

V t 1 J 1 \J 1 1 


Disnlavs the version of oneratinn svstem (OS1 software currently run n inn in 

L/ijuiuy j li i v_ v ci j iui i \j \ Uuci ulimu j y j i i i ^ \J j / jui lvi u i c l u m c 1 1 liv iuiiiiiiiu iii 




the switch. If an FDDI M odule is installed, also displays the currentversion of 




tne ruui m oauie us. 


log [-al'lkeywrd] 


Displays the event log. 




(Press the Space barwhen prompted by the more --message.) 




Examples: 




log DisplayslOO lines of the current event log, since the 




last reboot. 




log -a Displays the entire event log. 




log -a 'telnet Displays all event log lines containing the keyword "telnet" 




log telnet Displays any event log lines, since the last reboot, of the 




LUrrcllLIUyLlldLLUIlLdlllLllcKcyvVUlU LclllcL . 


! [repetitions] 


Repeatthe lastcommand. 




Examples: 




! Repeats the lastcommand once. 




! 3 Repeats the lastcommand three times. 


Repeat 


Continuously re peats the last command until a key is pressed on the console. 


Page 


Toggles paging mode fordisplay commands. 


Print 


Send the outputof a Command Promptcommand to a printer orto a file. 


Redo [?]/ [number] /[string] 


Display or redo a command from the command history. 



Examples: 

Redo Re-executes the mostrecentcommand. 
Redo ? Causes the lastten commands to be listed. 
Redo n Re-executes the previous nth command (1-10). 
Redo string Re-executes a previous command that begins with the text 
string. 
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Advanced Concepts 



Overview 

The switch provides support for these advanced features: 

■ Spanning Tree Protocol— STP (page 7-2) 

■ Port trunking (page 7-5) 

■ Filtering for enhanced bandwidth usage and in-band security (page 7-8) 

■ Virtual LANs- VLANs (page 7-14) 

■ IP Multicast— IGMP (page 7-23) 

■ Automatic Broadcast Control— ABC (page 7-30) 
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Spanning Tree Protocol (STP) 

Theswitch usesthelEEE 802. Id SpanningTree Protocol (STP) to ensurethat 
only one path at a time is active between any two nodes on the network. In 
networks where there is more than one physical path between any two nodes, 
STP ensures a single active path between them by blocking all redundant 
paths. STP is necessary in such networks because having more than one path 
between a pair of nodes causes loops in the network, which can result in a 
switch detecting the same node on more than one port. This results in 
duplication of messages, leading to a "broadcast storm" that can bring down 
the network. 



N ote ThedefaultSTP setting in the Switch 2000 is "Off". Ifyou areusing theswitch 

to provide redundant links, you should reconfigure the Spanning Tree Proto- 
col to "On". Also, when multiple VLANs are configured, you must enable STP 
separately for each VLAN in which you want spanning tree to operate. 



While allowing only one active path through a network at any time, STP retains 
any redundant physical path to serve as a backup (blocked) path in case the 
existing active path fails. Thus, if a active path fails, STP automatically 
activates (unblocks) an available backup to serve as the new active path for 
as long as the original active path is down. For example: 



• Active path from node A to node B : 1— > 3 

• Backup (redundant) path from node A to node B:4->2->3 




switch A 



switch B 



path cost: 100 




path cost: 100 



switch C 



path cost:200 



switch D 










node 



Figure 7-1. Example of Logical and Redundant Paths Between Two Nodes 
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How To Configure Spanning Tree: In most cases, the default STP param- 
eter settings are adequate. In cases where it is not, use this procedure to make 
configuration changes. 



Caution If you enable STP (step 5), it is recommended that you leave the remainder of 

the STP parameter settings at their default values until you have had an 
opportunity to evaluate STP performance in your network. Because incorrect 
STP settings can adversely affect network performance, you should avoid 
making changes without having a strong understanding of how STP operates. 
To learn the details of STP operation, refer to the IEEE 802. Id standard. 



1. From the Main menu, select Configuration. 

2. In the Configuration screen, select Spanning Tree. 

3. If multiple VLANs are configured, select the VLAN in which you want to 
configure STP. If multiple VLANs are not configured, skip this step. 

4. Select Edit to highlight the stp Enabled parameter. 

5. Press the Space bar to select Yes . (This enables STP.) 



Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 



DEFBULTCONFIG 

-=- CONSOLE - HONOGEP. NODE -=== 
ConFiguration - Spanning Tree 



STP Enabled [No] : No 
STP Priority [32768] : 
Hax Age [20] : 20 



Hello Tine [2] : 2 
Fwd. Delay [15] : 15 



Port 


Type 


Cost 


Prioritu 


| Port 


Tupe 


Cost 


Prioritu 


01 


Ethernet 


| 100 


128 


I B1 


Ethernet 


| 100 


128 


02 


Ethernet 


| 100 


128 


| 02 


Ethernet 


| 100 


128 


03 


Ethernet 


| 100 


128 


| 03 


Ethernet 


| 100 


128 


Alt 


Ethernet 


| 100 


128 


| Bit 


Ethernet 


| 100 


128 




Use arrow keys to change action selection and <Enter> to execute action. 



Figure 7-2. Example of the STP Configuration Screen with Ethernet 
Modules Installed in the Switch 
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6. If the remaining STP parameter settings are adequate for your network, 
go to step 9. 

7. Use [TabJ or the arrow keys to select the next parameter you want to 
change, then type in the new value. (If you need information on STP 
parameters, press [Enter] to select the Actions line, then press h to get 
help.) 

8. Repeat step 7 for each additional parameter you want to change. 

9. When you are finished editing parameters, press [Enter] to return to the 
Actions line. 

10. Press[s]to savethecurrentlydisplayed STP parameter settingsand return 
to the Configuration menu. 

11. When you are finished configuring the switch, return to the Main Menu. 
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Port Trunking 

The multiple ports in a trunk behave as one logical port 




Switch 3 



portl 
port 2 
port 3 

portn 










porta portw 
portb portx 
portc porty 

portz 
portn ... 

portn 










port 5 
port 6 
port 7 
port 8 

portn 



































Figure 7-3. Conceptual Illustration of Port Trunking 



Port trunking is used to allow up to four ports to be connected together to 
function as a single, higher-speed port to connect to another Hewlett-Packard 
switch designed for port trunking. This enables speeds of up to 400 Mbit/s in 
a 100Base-T or 100VG trunk, 200 Mbit/s in an FDDI trunk, and up to 40 Mbit/ 
s in a lOBase-T or lOBase-FL trunk. (The one-port FDDI Module is a "high 
power" module. The switch supports up to two such modules. Refer to the 
manual provided with the FDDI Module.) On the B -version of the Switch 2000 
(J 3100B) and on the Switch 800T, you can implement up to six port trunks in 
a switch, which enables the switch to function as a high-speed backbone. (The 
A-version of the Switch 2000— J 3100A— allows only one port trunk, but can 
be trunked to other Hewlett-Packard switches that support port trunking.) 

Traffic distribution over the trunk ports is determined when packets arrive 
with new source MAC addresses. Each new address is assigned to a trunk port 
in a sequential way that distributes the source addresses evenly over the trunk. 

The switch sends broadcast, multicast, and flooded traffic over only one port 
within the trunk in order to prevent a broadcast loop. (The switch automati- 
cally determines which port to use.) 
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N ote Using more than one media type and/or link speed in a port trunk is not 

supported. The console interface allows only links of the same media type 
within the same trunk. Similarly, it is recommended that all links in the same 
trunk have the same speed. You should also apply these rules when using a 
network management application to configure a port trunk. 



A configured trunk appears as a single port (labeled Trki, Trk2 . . .Trk6) 
on other configuration screens, such as the Spanning Tree and Port VLAN 
Assignment screens. Also, when assigning a port trunk to a VLAN, all ports in 
that trunk must be assigned to that same VLAN . 

When trunks are used in conjunction with filters and port monitoring, if a 
port is removed from the trunk, the filters and port monitoring for that port 
are returned to their default configuration settings. 

How To Configure the Port Trunk: Use the Port Configuration screen to 
configure trunks. 

1. From the Main menu, select Configuration. 

2. In the Configuration menu, select Ports. 

3. To assign a port to the trunk: 

a. Select Edit. 

b. Move the cursor to theTrunk column. 

c. Select the row for a port you want in the trunk. 

d. Press the Space bar to select the trunk you want. (To remove a port 
from a trunk, repeat the space bar until the trunk assignment is 
blank.) 

For example, in the fol low ing screen, ports Bl, B2, B3, and B4 have been 
assigned to trunk Trkl: 
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I - SWITCH. TRM 



File Edit Settings Phone 



Transfers Help 

DEFAULT CONFIG 



CONSOLE - MANAGER MODE 
Configuration - Ports 



EE 



Port 


Type 


Enabled 


Mode 


A1 


Ethernet 


| Ves 


Half 


Duplex 


A2 


Ethernet 


| Ves 


Half 


Duplex 


A3 


Ethernet 


| Ves 


Half 


Duplex 


fli* 


Ethernet 


| Ves 


Half 


Duplex 


B1 


Ethernet 


| Ves 


Half 


Duplex 


B2 


Ethernet 


| Ves 


Half 


Duplex 


B3 


Ethernet 


| Ves 


Half 


Duplex 


Bh 


Ethernet 


j Ves 


Half 


Duplex 


D1 


1 00UG 


| Ves 


Auto 


Detect 


D2 


1 OOUG 


| Ves 


Auto 


Detect 



Beast Linit 



Trm 
Trk1 
Trm 



Hctions-> 



ss Trunk Assignment 
EE 



mum 



Use arrow keys to change field selection, <Space> to toggle field choices, 
and <Enter> to go to Actions . 



Figure 7-4. Example of Configuring a Port Trunk 

4. To assign another port to the trunk, repeat steps 3c, and 3d. 

5. When you are finished assigning ports to the trunk, press [Enter] , then [sj 
(for Save) to save the new port trunk configuration and return to the 
Configuration menu. 

6. When you are finished configuring the switch, return to the Main Menu. 

To Remove a Port from the Trunk: In step 3c, above, select the port you 
want to remove from the trunk. In step 3d, continue pressing the Space bar 
until the trunk assignment is blank. 
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Filters and Security 

To enhance the switch's bandwidth usageand in-band security, configure per- 
port filters to forward desired traffic or drop unwanted traffic, as described 
below. The switch can support up to 50 filters. 

Table 7-1. Filter Types and Criteria 



Filter Type Selection Criteria 

M ulticast Traffic having a specified multicast address will be forwarded or 

dropped on a per-port (destination) basis. 

Protocol Traffic having the selected frame (protocol) type will be forwarded or 

dropped on a per-port (destination) basis. 

Source Port Traffic from a designated source portwill be forwarded ordropped on 

a per-port (destination) basis within the same VLAN . 

Source MAC Traffic from a specified source MAC address and coming through a 

particular source portwill be forwarded or dropped on a per-port 
(destination) basis within the same VLAN . 



Multicast Filters. This filter type enables the switch to send multicast 
traffic to a specified set of destination ports. This helps to preserve bandwidth 
by reducing multicast traffic on ports where it is unnecessary, and to isolate 
multicast traffic to enhance security. 



N ote IP multicast addresses occur in the range from 224.0.0.0 through 

239.255.255.255. When IGMP is enabled, any Traffic/Security filters configured 
with a "Multicast" filter typeand a "M ulticast Address" within theaboverange 
are disabled and an event log message indicating this action is logged . That 
is, IGMP will control the IP multicast traffic flow and theTraffic/Security filter 
will control any multicast traffic that is not IP multicast. (Multicast addresses 
are entered in the "Traffic/Security Filters" screen as Ethernet addresses in 
the range of 01005e-000000 through 01995e-7fffff .) 

If Spanning Tree is enabled, then the Spanning Tree multicast MAC address 
should not be filtered. (STP will not operate properly if the multicast MAC 
address is filtered.) 
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Protocol Filters. This filter type enables the switch to restrict traffic of a 
particular protocol type to a specific destination port or ports on the switch 
(or to be dropped for all ports on the switch). Filtered protocol types include: 

■ IP (Ethernet) 

■ IP (802.3 SAP) 

■ ARP 

■ DECLAT 

■ AppleTalk 

■ SNA 

■ NetBIOS 

■ IPX (Ethernet) 

■ IPX (802.3 SAP) 

■ VINES IP 

■ VINESEcho 



N ote The switch provides filtering only for Ethernet and 802.3 format packets. 



Source Port F ilters. This filter type enables the switch to restrict traffic 
from all end nodes on the indicated source port to specific destination ports 
(or to be dropped for all destination ports on the switch). If VLANs are 
configured, the destination port must be in the same VLAN as the source port. 



N ote If more than oneVLAN is configured, then the set of destination ports (Dest 

Port parameter) can consist of only thedestination ports thatare in thesame 
VLAN as the source port. 



Source MAC Filters. This filter type enables the switch to specify the port 
through which a node having a specified (source) MAC address can send 
traffic. Only ports that are selected are allowed to send and receive traffic for 
the specified node. For additional security, if traffic from the source MAC 
address appears on any port other than the selected one, the traffic from that 
sourcewill bedropped and theSecurity LED on thefrontof theswitch begins 
flashing. (To cleartheSecurity LED, usetheAdvanced Command ciearLED 
command.) 
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N ote If a node designated by the Source MAC parameter is moved to a different port 

than its original source port, any traffic to or from that node will not be 
forwarded by the switch. Forwarding will resume if the node is moved back 
to the original source port. 

Traffic between ports not designated as a "Source Port" is not affected by the 
filter. 



How To Configure Traffic/Security Filters: Use this procedure to spec- 
ify the type of filters to use on the switch and whether to forward or drop 
filtered packets for each filter you specify. You can create up to fifty filters. 

1. From the Main menu, select Configuration. 

2. In the Configuration menu, select Traffic/Security Filters to 
display the following screen. 



Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 



DEFAULTCONFIG 

CONSOLE - MANAGER MODE 

ConFiguration - TraFFic/Security Filters 



Filter Type 



Actions-> liffiU Add Edit Delete Help 

Use up/down arrow keys to change record selection, leFt/right arrow keys to 
change action selection, and <Enter> to execute action. 



Figure 7-5. The Traffic/Security Filters List Screen (Default Values) 

3. In the Actions line, press [a] (for Add) to display the Traffic/Security 
Filters Configuration screen shown in figure 7-6. 
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Terminal - SWITCH.TRM 



File Edit Settings Ehone Transfers Help 



EH 



DEFAULT CONFIG 



=======- CONSOLE - MANAGER MODE -========= 

Configuration - Traffic/Security Filters 



Filter Type 
Multi-cast Address 



Filter Type Parameter 



Type 



Action 



Type 



Action 



A1 
A2 
A3 
A4 
B1 



Ethernet 
Ethernet 
Ethernet 
Ethernet 
Ethernet 



Forward 
Forward 
Forward 
Forward 
Forward 



B2 
03 
BU 
D1 
D2 



Ethernet 
Ethernet 
Ethernet 
10OUG 
1 0OUG 



Forward 
Forward 
Forward 
Forward 
Forward 



Help 



EnssEmssEMsam 



Use arrow keys to change field selection, <Space> to toggle field choices, 
and <Enter> to go to Actions. 



Figure 7-6. Example of the Traffic/Security Filters Configuration Screen 

4. Press the Space bar to select the type of filter you want to configure. The 
options are: 

• Multicast (the default) 

• Protocol 
Source Port 

• Source MAC 

5. Press (T) once to highlight the next line. Depending on the type of filter 
you selected in step 4, select one of the options listed in the following 
table: 
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Filter Type Option 
Selected in Step 4 


NextLine for Filter 
Type Option 


Action for Selected Filter Option 


M ulticast 


M ulticast Address 


Type in the multicast address. 


Protocol 


Frame Type 


Use the Space bar to select the frame 
type. 


Source Port 


Source Port 


Use the Space bar to select the source 
port. 


Source MAC 


Source Portand 
Source MAC 
(address) 


a. Use the Space bar to select 
the source port. 

b. Press Q to highlight the 
Source MAC parameter. 

c. Type the MAC address of 
the source device whose 
packets you want to filter. 



6. Configure the filter action for each destination port. For example: 



Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 



DEFAULT CONFIG 



=======_ CONSOLE - MANAGER MODE -========= 

Configuration - Traffic/Security Filters 



Filter Type : Source Port 



a "Source Port " filter type has been 



source rort : in — 










Dest Port Type 


notion 


| Dest Port 


Type 


Action 


B1 Ethernet 
B2 Ethernet 
B3 Ethernet 


Forward 


| BU 
j D2 


Ethernet 
100UG 


| Forward 
j Forward 



A Drop action has been specified for ports B2 and 
B3. Thus, traffic from port Dl will not be forwarded 
by ports B2 and B3. 



flctions-> Cancel 



Help 



HUj.Bj.iJuijjwnram 



Use arrow heys to change field selection, <Space> to toggle field choices, 
and <Enter> to go to Actions. 



Figure 7-7. Example of Specifying Filter Actions for Individual Ports 
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a. Press (T) to highlight the Action option for a destination port 
( Dest Port ). 

b. Press the Space bar to select the filter action for that port ( Forward 
filtered packets-the default-or Drop filtered packets). 

c. Do one of the following: 

To configure thefilter action for another destination port, return 
to step 6a. 

If you are finished configuring actions for the current filter, go to 
step 7. 

7. Press [Enter] to return to the Actions line, then press [sj (for save ) to save 
the current filter configuration. 

8. Do one of the following: 

• If you want to configure another filter, return to step 3. 

• If you are finished configuring filters, press (¥) (for Back ) to return 
to the Configuration menu. 

9. When you are finished configuring the switch, return to the Main Menu. 
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The switch supports port-based virtual LANs (VLANs). A VLAN is a collection 
of ports that belong to a single broadcast domain. (That is, all ports carrying 
traffic for a particular subnet address would belong to the same VLAN.) This 
allows workgroupsto bedefined on the basis of their logical function instead 
of their physical location, and does not require recabling. 

Port-based VLANs are typically used to enable broadcast traffic reduction and 
increased security. By using port groupings, traffic is isolated to specific 
domains. A group of network users assigned to a VLAN are a separate traffic 
domain so that packets are forwarded only between ports that are designated 
for the same VLAN. Cross-domain broadcast traffic is eliminated and band- 
width is saved by not allowing packets to flood throughout the network. 

For example, if ports 1 through 5 belong to VLAN_1 and ports 6 through 10 
belong to VLAN_2, traffic from end-node stations on ports 2 through 5 is 
restricted to only VLAN 1, while traffic from ports 6 through 9 is restricted to 
only VLAN 2. For nodes on VLAN_lto communicatewith VLAN_2, their traffic 
must go through an external router via ports 1 and 10. 



Switch with Two 
VLANs Configured 





VLAN_1 






Portl 


External 
Router 








Port 10 











Port 2 
Port 3 
Port4 
Port 5 



Port 6 
Port 7 
Port 8 
Port 9 



Figure 7-8. Example of Routing Between VLANs via an External Router 
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Effect of VLANs on Other Switch Features 

I PX and I P I nterfaces. There is a one-to-one relationship between a VLAN 
and an IP or IPX network interface. Since the VLAN is defined by a group of 
ports, the state (up/down) of those ports determi nes the state of the I P or I PX 
network interface associated with that VLAN. When a VLAN comes up because 
one or more of its ports is up, the IP or IPX interface for that VLAN is also 
activated. Likewise, when a VLAN is deactivated because all of its ports are 
down, the corresponding IP or IPX interface is also deactivated. 

VLAN MAC Addresses. The switch has one unique MAC address for each 
of its VLAN interfaces. You can send an 802.2 test packet to this MAC address 
to verify connectivity to the switch. Likewise, you can assign an IP address to 
the VLAN interface, and when you Ping that address, ARP will resolve the IP 
address to this MAC address. (For IPX networks, each VLAN interface is 
automatically assigned a node address that is equivalent to the MAC address 
for that VLAN interface.) The switch allows up to eight VLAN MAC addresses 
(one per possible VLAN). If STP is enabled for a VLAN, the Spanning Tree 
source MAC address in the STP configuration BPDU packets for the VLAN 
will be the VLAN MAC address itself. 



N ote If multiple VLANs are configured on the switch, you will need to configure a 

separate instance of Spanning Tree for each VLAN in which you want 
Spanning Tree to operate. 



Port Trunks. When assigning a port trunk to a VLAN, all ports in the trunk 
must be assigned to the same VLAN . You cannot split trunk members across 
multiple VLANs. 

Port Monitoring. If you designate a port on the switch for network moni- 
toring, this port will not appear in the Port VLAN Assignment screen and 
cannot be configured as a member of any VLAN . 

VLANs Spanning Multiple Switches. It is possibleto have ports on more 
than oneswitch that are members of thesameVLAN. Switches having VLANs 
that cross multiple switches must be interconnected by one link per VLAN. 
For example, if VLAN A and VLAN B span two switches, the switches must be 
interconnected by two independent links; one for VLAN A and one for VLAN 
B. This concept is illustrated in figure 7-9 on the next page. 
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Adding a Switch 2000 Module. If you install a Switch 2000 module in a 
previously unoccupied slot, the ports in the module will be automatically 
added to the default VLAN. (To properly install a Switch 2000 module, refer 
to the documentation you received with the module.) 



Interswitch 



server 






workstation 




workstation 


1 \ r— » 1 

\ workstation 


workstation 


workstation 







Interswitch Link 
for VLAN B 



Figure 7-9. Example of VLANs Spanning Multiple Switches 

Overview of Using VLANs 

To use VLANs, you will need to follow these general steps: 

■ Configure at least one VLAN in addition to the default VLAN 
(DEFAULT_VLAN). Refer to "How To Configure a VLAN" on the next 
page. 

■ If you are managing VLANs with SN MP in an IP network, either configure 
an IP address and subnet mask for each VLAN or use the (default) Bootp 
feature to download an IP configuration from a Bootp server. Refer to 
"Internet (IP) Service Features" on page 3-9 or to appendix E, "Bootp 
Operation". 
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■ If you are managing VLANs with SNMP in an IPX network, configure the 
IPX gateway encapsulation and gateway node. (An IPX node address is 
automatically assigned to each VLAN interface.) Refer to "IPX Service 
Features" on page 3-7. 

How To Configure a VLAN 

In the factory default configuration, all ports on the Switch 2000 belong to a 
physical broadcast domain named "default_vlan". You can divide the 
switch ports into multiple virtual broadcast domains by adding one or more 
VLANs. Because the default VLAN permanently exists in the switch, adding 
one new VLAN results in two VLANs existing in the switch. Adding another 
VLAN results in three VLANs existing in the switch, and so on. 



N ote If you add one or more new VLAN(s), you should then reboot the switch. (A 

new VLAN will not appear as an option in the Port VLAN Assignment screen 
until after the switch is rebooted.) If you create a new VLAN without also 
rebooting the switch, you will be prompted to choose whether to reboot the 
switch before entering the Port VLAN Assignment screen. When you move a 
port to a VLAN, the new assignment is automatically enabled, and it is not 
necessary to reboot the switch a second time. 



To create a new VLAN and/or move ports into a VLAN, use the following two 
procedures. 

To C reate a New VLAN. Use this procedure to add a new VLAN or to edit 
the name of an existing VLAN. 

1. Beginning at the Main Menu, select Configuration to display the 
configuration menu. 
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Use arrow keys to change menu selection and <Enter> to execute selection. 



Figure 7-10. The VLAN Options in the Configuration M enu 

2. From the Configuration menu, select vlan Names. You will then see a 
screen similar to the following: 
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Figure 7-11. The (Default) VLAN Names Screen 
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3. Press \a\ (for Add). You will then be prompted for a new VLAN name: 

Name : _ 

4. Type the name (up to 12 characters, with no spaces) of a new VLAN that 
you want to add, then press [ErniF| . 

5. Press [s] (for Save). 

6. Do one of the following: 

• If you want to add another VLAN name, return to step 3. 

• If you are finished entering VLAN names, press (¥) (for Back) to 
return to the Configuration menu. 

7. Return to the Main Menu and reboot the switch to activate the new 
VLAN(s) you havejust entered. 



N ote You can rename "default_vlan", but you cannot delete it from the Switch, 

regardless of which name you assign to it. 



To Move a Port to a VLAN. UsethisproceduretomoveaportintoaVLAN. 
(Ports you do not specifically assign to a VLAN are automatically placed in 
the default VLAN.) 

1. If you havejust added a new VLAN name and have not yet rebooted the 
switch, do so now (step 7 in the previous procedure). 

2. Return to the Main Menu and select Configuration to display the Config- 
uration menu. 

3. Select Port vlan Assignment . You will then see a Port VLAN 
Assignment screen similar to the following: 
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Figure 7-12. Example of the PortVLAN Assignment Screen 



4. The VLAN column showstheVLAN to which each porton the switch is 
assigned. (Ports that you do not specifically assign are automatically 
assigned to the default VLAN.) To assign a porton the switch to a different 
VLAN than the current selection: 

a. Press [TJ (for Edit) to move the highlight to the VLAN column. 

b. Use (T) to highlighttheVLAN namefor the port you wantto re-assign 
to a different VLAN. 

c. Press the Space bar to select a different VLAN name. 

d. Do one of the following: 

To re-assign another port to a different VLAN, return to step 8b. 
If you are finished assigning ports to VLANs, press [Enter] and {s\ 
(for save) to activate the changes you've made and to return to 
the Configuration menu. 

5. Return to the Main Menu. (It is not necessary to reboot the switch; the 
new port assignments are implemented when you do the "save" in the 
preceding step.) 
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VLAN Restrictions 

■ Each port can be assigned to only one VLAN. 

■ An external router must be used to communicate between two VLANs. 

■ Duplicate MAC addresses on different VLANs are not supported and can 
cause VLAN operating problems. These duplicates are possible and com- 
mon in situations involving Sun workstations with multiple network 
interface cards, with DECnet routers, and with certain Hewlett-Packard 
routers using OS versions earlier than A 09. 70 where any of the following 
are enabled: 

• IPX 

• IP Host-Only 

• STP 

• XNS 

• DECnet 

Currently, the problem of duplicate MAC addresses in IPX and IP Host- 
Only environments is addressed through the HP router OS version 
described below. However, for XNS and DECnet environments, a satis- 
factory solution is not available from any vendor at this time. 



N ote Operating problems associated with duplicate MAC addresses are likely to 

occur in VLAN environments where XNS and DECnet are used. For this 
reason, using VLANs in XNS and DECnet environments is not currently 
supported on the Switch 2000. 



■ If you assign a port to be the Network Monitoring Port, that port cannot 
be configured as a member of any VLAN . If the port was previously 
assigned to aVLAN (includingthe default VLAN), it will beautomatically 
removed from the VLAN when the Monitoring Port assignment is made. 
When you subsequently disablethe monitoring port assignment, the port 
will be returned to the default VLAN . 

■ Before you can delete a VLAN, you must move all of its ports to another 
VLAN. 
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HP Router Requirements. Use the Hewlett-Packard versi on A.09.70 (or 

later) router OS release if any of thefollowi ng Hewlett-Packard routers are 
i nstalled i n networks i n whi ch you wi II be usi ng VLANs: 

HP Router 440 (formerly Router ER) 
HP Router 470 (formerly Router LR) 
HP Router 480 (formerly Router BR) 
HP Router 650 

Release A.09.70 (or later) is available electronically through the HP BBS 
service and the World Wide Web. Refer to the "Customer Support Services" 
card at the beginning of this manual. 

Symptoms of Duplicate MAC Addresses in VLAN 
Environments 

There are no definitive events or statistics to indicate the presence of duplicate 
MAC addresses in a VLAN environment. However, one symptom that may 
occur is that a duplicate MAC address can appear in the Port Address Table 
screen to be linked with one port, and then later appear to be I inked to another 
port. 
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IP Multicast (IGMP) 

In a network where IP multicast traffic is transmitted for various multimedia 
applications, you can use the switch to reduce unnecessary bandwidth usage 
on a per-port basis by configuring IGMP. 

How IGMP Operates 

The Internet Group Management Protocol (IGMP) is an internal protocol of 
the Internet Protocol (IP) suite. IP manages multicast traffic by using 
switches, multicast routers, and hosts that support IGMP. (In Hewlett-Pack- 
ard's implementation of IGMP, a multicast router is not necessary as long as 
the switch is configured to support IGMP with the querier feature enabled.) 
A set of hosts, routers, and/or switches that send or receive multicast data 
streams to or from the same source(s) are termed a multicast group, and have 
the same multicast group address. The multicast group running version 2 of 
IGMP uses three fundamental types of messages to communicate: 

■ Query: A message sent from the querier (multicast router or switch) 
asking for a response from each host belonging to the multicast group. If 
a multicast router supporting IGMP is not present, then the switch must 
assume this function in order to elicit group membership information 
from the hosts on the network. 

■ Report: A message sent by a host to the querier to indicate that the host 
wants to be or is a member of a given group indicated in the report 
message. 

■ Leave Group: A message sent by a hostto thequerierto indicate that the 
host has ceased to be a member of a specific multicast group. 

Thus, IGMP identifies members of a multicast group (within a subnet) and 
allows IGM P -configured hosts (and routers) to join or leave multicast groups. 

Role of the Switch. When IGMP is enabled on the switch, it examines the 
IGMP packets it receives: 

■ To learn which of its ports are linked to IGMP hosts and multicast routers/ 
queriers belonging to any multicast group 

■ To become a querier if a multicast router/querier is not discovered on the 
network 
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Once the switch learns the port location of the hosts belonging to any partic- 
ular multicast group, it can direct group traffic to only those ports, resulting 
in bandwidth savings on ports where group members do not reside. The 
following example illustrates this operation. 

Figure 7-13 shows a network running IGMP. 

■ PCs 1 and 4, Switch #2, and all of the routers are members of an IP 
multicast group. (The routers operate as queriers.) 

■ Switch #1 ignores IGMP traffic and does not distinguish between IP 
multicast group members and non-members. Thus, it is sending large 
amounts of unwanted multicast traffic out the ports to PCs 2 and 3. 

■ Switch #2 is recognizing IGMP traffic and learns that PC #4 is in the IP 
multicast group receiving multicast data from the video server (PC X). 
Switch #2 then sends the multicast data only to the port for PC #4, thus 
avoiding unwanted multicast traffic on the ports for PCs #5 and #6. 




Figure 7-13. The Advantage of Using IGM P 
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The next figure (7-14) shows a network running IP multicasting using IGM P 
without a multicast router. In this case, the IGMP-configured switch runs as 
a querier. 

PCs 2, 5, and 6 are members of the same IP multicast group. 

IGMP isconfigured on switches3and 4. Either of these switches can operate 
as querier because a multicast router is not present on the network. (If an 
IGMP switch does not detect a querier, it automatically assumes this role, 
assuming the querier feature is enabled— the default— within IGMP.) 



IGMP isN 



Switch #1 




PC #5 



PC* 



Figure 7-14. Isolating IP Multicast Traffic in a Network 

■ In the above figure, the multicast group traffic does not go to switch land 
beyond because either the port on switch 3 that connects to switch 1 has 
been configured as blocked or there are no hosts off of switch 1 or switch 
2 that belong to the multicast group. 

■ For PC #1 to become a member of the same multicast group without 
flooding IP multicast traffic on all ports of switches 1 and 2, IGMP must 
be configured on both switches 1 and 2. 
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N ote IP multicast addresses occur in the range from 224.0.0.0 through 

239.255.255.255. When IGMP is enabled, any Traffic/Security filters (page 7-8) 
configured with a "Multicast" filter type and a "Multicast Address" within the 
above range are disabled and an event log message indicating this action is 
logged . That is, IGMP will control the IP multicast traffic flow and the Traffic/ 
Security filter will control any multicast traffic that is not IP multicast traffic. 



How To Configure IGMP 

In the factory default configuration, IGMP is disabled. If multiple VLANs are 
configured, you can configure IGMP on a per-VLAN basis. The configuration 
options include: 

■ E nabling or disabling IGMP. Disabling IGMP (the default) causes all 
ports on the switch or VLAN to simply forward IP multicast traffic. 
Enabling IGMP allows the ports to detect IGMP queries and report packets 
and manage IP multicast traffic through the switch. If no other querier is 
detected, the switch will then also function as the querier. (If you need to 
disable the querier feature, you can do so through the IGMP configuration 
MIB. Refer to "ChangingtheQuerierConfiguration Setting"on page 7-29.) 

■ High-priority forwarding. Disabling this parameter (the default) causes 
the switch or VLAN to process IP multicast traffic, along with other traffic, 
in the order received. If priority forwarding is supported by the network 
technology you are using (such as Hewlett-Packard's implementation of 
100Base-TX), enabling this parameter causes the switch or VLAN to give 
a higher priority to IP multicast traffic than to other traffic. 

Per-Port handling of I P multicast traffic. In the factory default state 
(IGMP disabled), theswitch forwardsall IGMP traffic. When IGMP isenabled, 
you can configure the switch to do any of the following on a per-port basis: 

• Automatic (thedefault):Causestheswitchto interpret IGMP packets 
and to filter IP multicast traffic based on the IGMP packet information 
for that port. 

• Blocking: Causes theswitch to drop all IGMP transmissions received 
and block all outgoing IP Multicast packets for that port. 

• Forwarding: Causes the switch to forward all IGMP and IP multicast 
transmissions through the port. 
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N ote If you move a port from one VLAN to another, that port will retain its IP 

multicast (ip Mcast) parameter setting. For example, suppose port Al is in 
DEFAULT_VLAN with an IP Mcast setting of "Blocked". If you create another 
VLAN named VLAN 2 and then move port Al to VLAN 2, the IP Mcast setting 
will remain the same (Blocked). 



To Configure IGM P. Use this procedure to configure or edit the IGM P 
settings for a switch or VLAN. 

1. Beginning at the Main Menu, select Configuration to display the 
Configuration menu. 
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Figure 7-15. The IGM P Option in the Configuration M enu 

2. Select IP Multicast (IGMP) Service. 

3. If VLAN s are configured, select the VLAN in which you want to configure 
IGMP and press (T) (for Edit). You will then see a screen similar to the 
following: 
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Figure 7-16. Example of the (Default) IP Multicast (IGMP) Service Screen 

4. Press the Space bar to select Yes (to enable IGMP). 

5. Use [TJ to highlight the Forward with High Priority parameter. 

6. If you want IGMP traffic to be forwarded with a higher priority than other 
traffic on the switch or VLAN, use the Space bar to select Yes. Otherwise, 
leave this parameter set to No. 

7. Use (T) to highlight the ip Mcast parameter setting for a port you want 
to reconfigure. (The options are: Auto, Blocked, and Forward. Refer to 
the online Help and/or page 7-26 for further informtion on these choices.) 

8. Repeat step 7 for each port you want to configure. 

9. When you are finished configuring the IP Mcast parameter for the dis- 
played ports, press [Emi7| and \sj (for save) to activate thechanges you've 
made to the IGMP configuration. 

10. Return to the Main Menu. (It is not necessary to reboot the switch. The 
new IGMP configuration is implemented when you select the "save" in 
step 9.) 
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C hanging the Querier Configuration Setting.. The Querier feature, by 
default, is enabled and in most cases should be left in this setting. If you need 
to change the querier setting, you can do so using the IGM P Configuration 
M I B . To disable the querier setting, select the Advanced Command prompt 
from the Main Menu and enter this command: 

setmib hpSwitchlgmpQuerierState . <vlan number> -i 2 

To enable the querier setting, select the Advanced Command prompt from the 
Main Menu and enter this command: 

setmib hpSwitchlgmpQuerierState . <vlan number> -i 1 

To view the current querier setting, select the Advanced Command prompt 
from the Main Menu and enter this command: 

getmib hpSwitchlgmpQuerierState . <vlan number> 

where: 

<vlan number > is the sequential (index) number of the specific VLAN. If no 
VLANs are configured, use "1". For example: 

getmib hpSwitchlgmpQuerierState. 1 
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Automatic BroadcastControl (ABC) 

ABC helps to conserve bandwidth and processing power for IP and/or IPX 
traffic within a broadcastdomain without addingthelevelsof costand latency 
normally associated with routers. ABC achieves this by using the switch to 
reduce I PARP and RIP broadcast traffic and IPX NSQ, RIP, and SAP broadcast 
traffic normally found on a network. Also, when enabled, ABC allows you to 
set the broadcast limit (Beast Limit parameter) for all ports on the switch 
(or, if VLANs are configured, for all ports in the specified VLAN). 

How ABC Operates 

Reducing ARP Broadcast Traffic. When enabled on the switch or a VLAN, 
ABC doesthefollowingto reduceARP (Address Resolution Protocol) broad- 
cast traffic: 

1. Learning which port various hosts reside on by reading the address 
information in broadcastARP (Address Resolution Protocol) packetsand 
unicastARP response packets 

2. Proxy responding to subsequent ARP broadcast requests for those hosts 
from other devices instead of forwarding such requests out all ports and 
requiring each host to respond 

For example, assume that host A has traffic for host D. 



Switch 
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Hub 
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HostB 



Host C 



Host D 



Figure 7-17. Example of a Network Using ABC 
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To learn host D's M AC address, host A sends a broadcast ARP request. 
Because the switch does not yet know the location of host D, it floods the 
request out all ports. However, the switch also learns from the ARP request 
the location of host A and stores this information in its ARP cache. Host D 
receives the ARP request (as will all other hosts conected to the switch), and 
responds with a unicast packet through the switch to host A. The switch 
monitors this response, learns the location of host D, and stores this informa- 
tion in its ARP cache. Thus, the switch now knows the address information 
for both host A and host D. Now, hosts A and D can send unicast packets to 
each other because they have learned each other's addresses. Suppose that 
host C now wants to communicate with host A. C sends a broadcast ARP 
request to theswitch. Because theswitch already hasA'saddress information, 
it does not flood C's ARP request out all ports, but instead sends a proxy ARP 
reply to C that tells C the address information for host A. Host C can now send 
unicast packets directly to host A. From these packets, host A will learn host 
C's addressing information and be able to respond with unicast packets 
addressed to host C. The result is reduced network traffic because host C's 
broadcast ARP request was not flooded on the switch's ports. Similarly, for 
IPX networks, the switch learns service and route information from SAP sand 
RIPs respectively, and maintains SAP and RIP tables that contain the 
addresses of known servers. Using this data, the switch sends proxy responses 
to NSQ requests for these servers instead of flooding the requests on all ports. 



N ote The switch sends proxy ARP replies to hosts (ARP initiators) that are on a 

different port than the target host. However, theswitch does not send a proxy 
ARP reply when both the initiator and the target host are on the same port. 
For example, the switch does not send a proxy ARP reply for host B (figure 
7-17) in replying to an ARP request from host A. 

The switch does not translate encapsulation types (such as 802.2 to SNAP in 
IPX). As a result, if a host client sends an NSQ request for a server, theswitch 
will always send a proxy response containing the address of a server support- 
ing the same encapsulation type. If theswitch has not learned of a server using 
the same encapsulation type as the host client, then the switch will flood the 
host client's NSQ request to all ports. However, if a local server supporting 
the same encapsulation type exists on a port from which the NSQ request is 
received, the switch will not forward the request to other ports. 

If Automatic Broadcast Control (ABC) is configured and more than one port 
is monitored, then broadcast packets may be duplicated on the monitor port. 
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Reducing RIP and SAP Broadcast Traffic. YoucanalsoconfigureABCto 
limit IP RIP and IPX RIP and SAP broadcasts, which can further reduce 
broadcast traffic on your network. RIP and SAP broadcasts are normally 
forwarded on all ports. However, with ABC enabled and additional RIP and 
SAP parameters configured, the switch will forward IP RIP and IPX RIP and 
SAP broadcasts only to the ports on which these types of broadcasts have 
been received earlier. This means that other ports are relieved of some 
unnecessary traffic because the RIP and SAP broadcasts will be forwarded 
only to ports where there are routers or servers that would use the broadcast 
information. 

How To Configure ABC 

In the factory default configuration, ABC is disabled. If multiple VLANs are 
configured, you can configure ABC on a per-VLAN basis. Otherwise, the 
configuration is on the switch level. You can enable ABC for IP only, IPX only, 
or for both. When ABC is disabled (the default), all broadcasts are sent out 
either all ports in the switch or, if VLANs are configured, out all ports in VLANs 
whereABC isdisabled. ABC can be enabled with theoptionsdescribed below. 

Enabling IP Only 

Enabling ABC for IP causes the switch to send a proxy ARP reply for hosts 
whose addresses the switch has learned. Enabling for IP also: 

■ Allows you to choose whether to enable ABC for IP RIP Control. If 
enabled, IP RIP Control causes IP RIP broadcasts to be forwarded only 
to portswherelP RIPshavebeen previously received. Thisavoidssending 
IP RIP broadcasts to ports where there is no indication of devices that 
would use them. 

■ Activates a broadcast limitfor either all ports in theswitch or, if VLANs 
are configured, for all ports in the selected VLAN. (You can accept the 
default broadcast limit setting, change it, or turn it off.) 

Enabling IPX Only 

EnablingABC for IPX causes theswitch to send a proxy NSQ (nearest server 
query) reply for services the switch has learned. Enabling for IPX also: 

■ Allowsyou to choose whetherto enableABC for IPX RIP/SAP control. If 
enabled, IPX RIP/SAP control causes IPX RIP and SAP broadcasts to be 
forwarded only to ports where IPX RIPs and SAPs have previously been 
received. Thisavoidssending IPX RIP and SAP broadcasts to ports where 
there is no indication of devices that would use them. 
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■ Activates a broadcast limit for either all ports in the switch or, if VLANs 
are configured, for all ports in the selected VLAN. (You can accept the 
default broadcast limit setting, change it, or turn it off.) 

Enabling Both IP and IPX (IPJPX) 

Enabling ABC for IP and IPX causes the switch to: 

■ Send a proxy IP ARP reply for hosts whose addresses the switch has 
learned. 

■ Send a proxy NSQ (nearest server query) reply for services the switch has 
learned. 

Enabling for both IP and IPX also allows you to choose whether to: 

■ Enable ABC for IP RIP Control and/or IPX RIP/SAP control, as described 
in the preceeding subsections. 

■ Set a broadcast limit for either all ports in the switch or, if VLANs are 
configured, for all ports in the selected VLAN . 
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To Configure ABC . Use this procedure to configure or edit the ABC settings 
for a switch or VLAN . 

1. Beginning at the Main Menu, select Configuration to display the 
Configuration menu. 
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Figure 7-18. The Configuration Menu 

2. Select Automatic BroadcastControl (ABC) and press [Enter] , 

3. If no VLANs are configured, go to step 4 . If VLANs are configured, press 
Edit, then select the VLAN in which you want to configure ABC. 



N ote TherestofthisprocedureassumesthatVLANsarenotconfigured. If you have 

VLANs configured on your switch, you can still use this procedure. The screen 
layout will be different than shown here, but the parameters are the same. 

4. Press [T| (for Edit). 
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Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 



DEFHULTCONFIG 

============- CONSOLE - MANAGER MODE -============= 

Configuration - Automatic Broadcast Control (hBC) 



ABC Enabled [Disabled] : Disabled 



V 



NoteiThis is the screen 
layoutwhen no VLANs are 
configured. The screen has 
a different appearance if 
LANs are confiaured 



flctions-> [BTiffll^ Edit Sage Help 



Use arrow keys to change action selection and <Enter> to execute action. 



Figure 7-19. The Default ABC Screen (No VLANs Configured) 

5. Use the Space bar to enable ABC. Select one of these options: 

• ip_ipx: Enables ABC for both the IP and IPX protocols. 

• ip: Enables ABC only for the IP protocol. 

• ipx: Enables ABC only for the IPX protocol. 
Disabled 

6. Ifyou wantbroadcastcontrol disabled for IP RIP and/orlPX RIP andSAP 
broadcasts, leave the remaining parameters set to No and go to step 7. 

If you do want broadcast control for RIP or SAP broadcasts, press an 
arrow key to display the remaining ABC parameters. (If VLANs are 
configured, these parameters already appear.) Then do oneof the foil ow- 
ing: 
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If you enabled ABC for I PI PX and pressed an arrow key (figure 7-20), 
below): 



Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 



DEFAULT COHFIG 



-===========- CONSOLE - MANAGER MODE -============= 

Configuration - Automatic Broadcast Control (ABC) 



ABC Enabled [Disabled] :IP IPX 
IP RIP Control [No] : ITf 
IPX RIP/SAP Control [No] : No 
Beast Limit [UO] : UO 




Help 



Use arrow heys to change field selection, <Space> to toggle field choices, 
and <Enter> to go to Actions. 



Figure 7-20. ABC Enabled With IPJPX Option (No VLANs Configured) 



ii. 



in. 



IV. 



If you want IP RIP broadcast control, then select the ip rip 
Control parameter and use the Space bar to select Yes. 
IfyouwantlPX RIP/SAP broadcastcontrol, selectthe ipx rip/ 
sap control parameter and use the Space bar to select Yes. 
If you want to specify a different global broadcast limit for the 
switch or selected VLAN (if VLANs are configured), select the 
Beast Limit parameter and type a value from 0 to 99. (A "0" 
disables broadcast limits; 40 is the default setting.) 
Go to step 7. 



Note 



The broadcast limit (Beast Limit) parameter in the ABC screen sets a global 
broadcast limit value for all ports in the switch or selected VLAN (if VLANs 
are configured). If you want to set broadcast limits on a per-port basis, you 
can override the setting in this screen by going to the Port Configuration 
screen (page 3-6) and setting the broadcast limit value individually for one or 
more specific ports. 
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If you enabled ABC for IP (figure 7-21, below): 



Terminal - SWITCH.TRM 
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DEFAULT COHFIG 



============- CONSOLE - MANAGER MODE -============= 

Configuration - Automatic Broadcast Control (ABC) 



ABC Enabled [Disabled] : I P 
IP RIP Control [No] : ITf 
Beast Limit [40] : hB 



Note: This is the screen 
layoutwhen noVLANsare 
configured. Thescreen has 
a different appearance if 




Help 



Use arrow heys to change field selection, <Space> to toggle field choices, 
and <Enter> to go to Actions. 



Figure 7-21. ABC Enabled With IP Option (No VLANs Configured) 



IV. 



Select IP RIP Control. 

Use the Space bar to select Yes. 

If you want to specify a different global broadcast limit for the 
switch or selected VLAN (if VLANs are configured), select the 
Beast Limit parameter and type a value from 0 to 99. (A "0" 
disables broadcast limits; 40 is the default setting.) Refer to the 
Note on page 7-36. 
Go to step 7. 
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• If you enabled ABC for IPX (figure 7-22, below): 
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DEFAULT CDHFIG 



-===========- CONSOLE - MANAGER MODE -============= 

Configuration - Automatic Broadcast Control (ABC) 



ABC Enabled [Disabled] : IPX 
IPX RIP/SAP Control [No] : ITTf 
Beast Limit [i>B] : 40 



NoteiThis is the screen 
layoutwhen noVLANsare 
configured. The screen has 
a different appearance if 



Actions-> Cancel Edit Saue Help 



Ose arrow keys to change field selection, <Space> to toggle field choices, 
and <Enter> to go to Actions. 



Figure 7-22. ABC Enabled With IPX Option (No VLANs Configured) 



i. Select IPX RIP/SAP Control. 

ii. Use the Space bar to select Yes. 

iii. If you want to specify a different global broadcast limit for the 
switch or selected VLAN (if VLANs are configured), select the 
Beast Limit parameter and type a value from 0 to 99. (A "0" 
disables broadcast limits; 40 is the default setting.) Refer to the 
Note on page 7-36. 

iv. Go to step 7. 

7. Press [Enter] to return to the Actions menu. 

8. Press [s] (for Save) to activate the changes you have made to the ABC 
parameters. 

9. Return to the Main Menu. (It is not necessary to reboot the switch. The 
new ABC configuration is implemented when you select the "save" in step 
8.) 
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Overview 

You can download new switch software (operating system— OS) and upload 
or download switch configuration files. These features are useful for acquiring 
periodic switch software upgrades and for storing or retrieving a switch 
configuration. 
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Downloading an Operating System 

You can use the switch console'sTFTP feature (Download os), HP'sSNMP 
Download Manager, or the HP Update Utility (update.exe) to download a new 
operating system (OS) to the switch. Downloading a new OS does not change 
the current switch configuration. 

Using the Download os option from the switch Main Menu (described on 
the following pages): 

■ The switch must be configured for either IP or IPX service. 

■ The OS software to download must be stored in a file on a TFTP server in 
your network or VLAN (if configured). 

■ The switch must be properly connected to the network. 
Using the HP Download Manager: 

■ At a minimum, use a 386 8-megabyte IBM-compatible PC with a network 
interface. 

■ Obtain softwareand instructionsfrom HP's BBS or World WideWeb site. 
(Refer to the "Customer Support Services" section in appendix G, "Trou- 
bleshooting".) 

You can access Download Manager in the HP AdvanceStack Assistant net- 
work management application by clicking the right-side mouse button on the 
background topology view. 

Using the HP Update Utility: 

■ Use a PC with a direct-connect RS-232 serial cable. 

■ Obtain the update utility and refer to the instructions in the readme.txt 
file included with the utility. The utility is on disks shipped with some 
Switch 2000 modules and in a compressed, self-extracting file available 
from World Wide Web site and BBS. (Refer to the "Customer Support 
Services" card at the front of this manual.) Updates are routinely supplied 
free from HP's BBS and WWW services. 
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UsingTFTP To Download the OS File 

This procedure assumes that an OS file for the switch has previously been 
stored on a TFTP server accessible to the switch. (The OS file is typically 
available from HP's electronic services— refer to the card at the front of this 
manual.) Before you use the procedure, do the following: 

■ Determine the IP or IPX address of the TFTP server in which the OS file 
has been stored. 

■ If VLANs are configured on the switch, determine the name of the VLAN 
in which the TFTP server is operating. 

■ Determinethenameof the OS file stored intheTFTP server for the switch 
(for example, FJ_03_01.swi). 



N ote Software versions A. 02. 01 and later include two OS files; one for the Switch 

2000 and one for the optional FDDI Module that you can install in the switch. 
These two files are named as follows: 

fi lenameswi 
fi lenamefdd 

where fi lename(version number) will be the same for both files. For 
example: 

b_03_oi . swi OS for the B-version of the Switch 2000 chassis and 
all Switch 2000 modules that operate with version 
A_03_01 or earlier software. 

B_03_oi.fdd OS for the FDDI module. (Necessary if an FDDI 
Module is installed.) 

Important: If you are using the FDDI module in the switch, the version 
numbers of the FDDI OS and the Switch 2000 OS must match. Otherwise, the 
FDDI Module may not operate properly even though it is recognized by the 
switch. If the FDDI module is installed in the switch, you can compare the 
version numbers of the FDDI OS and the switch OS by executing the version 
c o m m a n d . T o ex ec u te ver s i on, sel ect Advanced Commands fromtheMain 
Menu, then type version and press gmeF) . (If VLANs are configured, select 
the VLAN to which the FDDI port is assigned before you execute version. 

Ensure that both OS files (fi lenameswi and fi lenamefdd) are in the same 
TFTP server directory when using this procedure to download an OS to the 
Switch 2000. If yourTFTP server isa Unix workstation, ensurethatthecase 
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(upper or Iowa") that you specify for thefi lenamei n the Switch 2000 
Download OS screen is the same caseas the characters i n theOSfi lenames 
i n theTFTP server. 



1. In the Main Menu, select Download os. You will then see this screen: 



Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 



EE 



DEFAULT CONFIG 



=- CONSOLE - MANAGER MODE 
Download OS 



Method : TFTP 
Protocol : QB 
TFTP Seruer : 
ULAN : DEFAULT_ULhN 
Remote File Name : 



This tine appears ontyif 



Actions-> Cancel Edit execute Help 

Ose arrow keys to change Field selection, <Space> to toggle Field choices, 
and <Enter> to go to Actions. 



Figure 8-1. The Download OS Screen (Default Values) 

2. Press [T| (for Edit). 

3. With the Protocol field highlighted, use the Space bar to select either 
IP or IPX, depending on the protocol in use in your network. 

4. Highlight the tftp Server field and type in the IP or IPX address of 
theTFTP server in which the OS file has been stored. 

5. If VLANs are configured, highlight the vlan field. Then use the Space 
bar to select the VLAN in which the TFTP Server is operating. 

6. Highlight the Remote File Name field, then type the name of the OS 
file. If you are using a UNIX system, remember that the filename is case- 
sensitive. 

7. Press [Enter] , then (Y) (for execute) to begin the OS download. The 
following screen then appears: 



8-4 



File Transfers 

Downloading an Operating System 



Terminal SWITCH.TRM 



File Edit Settings Phone Transfers Help 



DEFHULT COHFIG 



CONSOLE - MRHRGER MODE 
Download OS 



Method : TFTP 
Protocol : IP 
TFTP Seruer : 15.188.1B 
ULHN : DEFAULT "ULflN 
Remote File Name : R_02_O1.swi 



le of a TFTP 



Exampleofa Remote 
File Name on a TFTP 



Receiued 226 



bytes of US download. 



Figure 8-2. Example of the Download OS Screen During a Download 

8. A "progress" bar indicates the progress of the download. When the entire 
operating system has been received, all activity on the switch halts and 
the following message appears: 

WRITING SYSTEM SOFTWARE TO FLASH, BACK SOON 

After the system flash memory has been updated with the new operating 
system, the switch reboots itself and begins running with the new operat- 
ing system. 

9. To confirm that the operating system downloaded correctly: 

a. Select status and Counters from the Main Menu 

b. SelectSwitch Information from the status and Counters screen. 

c. Check the os version line. 
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Switch-to-Switch Download 

If you have two or more Switch 800Ts and/or the B -version of the Switch 2000 
(HP J 3100B) networked together, you can download the OS software from 
one switch to another by using the Download OS feature in the switch console 
interface. (The Switch 800T and the B -version of the Switch 2000 use the same 
OS.) To do so: 

1. Go to the Download OS screen in the switch to receive the download. 

2. Enter the IP or IPX address of the remote switch containing the OS you 
want to download. 

3. Enter "OS" for the Remote File Name. 

4. Execute the download. 



N ote The "A" version of the Switch 2000 uses OS software that is different from the 

OS software used by the "B" version of the Switch 2000 and the Switch 800T. 
Forthisreason,transferringOS software between an "A"version of theSwitch 
2000 and either a Switch 800T or a "B" version of the Switch 2000 is not 
supported. 



8-6 



File Transfers 

Troubleshooting TFTP Downloads 



TroubleshootingTFTP Downloads 



If a TFTP download fails, the Download OS screen indicates the failure. 



Terminal - SWITCH.TRM 



File Edit Settings Phone Transfers Help 



DEFAULT CONFIG 



CONSOLE - MANAGER MODE 

Download OS 



Method : TFTP 
Protocol : IP 

TFTP Seruer : 19.23.109.11 

Remote File Name : A 02 5.SUI 



Received 0 bytes of OS download. 



ldUH.-»1,1ll!JJ«J.»J,1,UI,nfl 



Figure 8-3. Example of M essage for Dow nload Failure 



To find more information on the cause of a download failure, examine the 
messages in the switch's Event Log. (See "Event Log" on page 4-16.) 

Some of the causes of download failures include: 

■ Wrong protocol specified for the Protocol parameter 

■ Incorrect or unreachable address specified for theTFTP Server parame- 
ter. This may include network problems. 

■ Incorrect name specified for the Remote File Name parameter, or the 
specified file cannot be found on theTFTP server. This can also occur if 
theTFTP server is a Unix machine and the case (upper or lower) for the 
filename on the server does not match the case for the filename entered 
for the Remote File Name parameter in the Download OS screen. 

■ One or more of the switch's IP or IPX configuration parameters are 
incorrect. 
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■ For a Unix TFTP server, the file permissions for the OS file do not allow 
the file to be copied. 

■ Another console session (through either a direct connection to a terminal 
device or through Telnet) was already running when you started the 
session in which the download was attempted. 



N ote If an error occurs in which normal switch operation cannot be restored, the 

switch automatically reboots itself. In this case, an appropriate message is 
displayed in the copyright screen that appears after the switch reboots. You 
can display the same information by selecting the Advanced commands 
option from the Main Menu and executing the History command. 
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Transferring Switch 2000 Configurations 



You can use the following commands to transfer Switch 2000 configurations 
between the switch and a PC or Unix workstation. 



Command 


Function 


Get 


Download a Switch 2000 configuration file from a networked PC or Unix 
workstation using TFTP. 


Put* 


Upload a Switch 2000 configuration to a file in a networked PC or Unix 
workstation using TFTP. 


ZGet 


Uses a Zmodem-compatible terminal emulation program to download a Switch 
2000 configuration file from a PC or Unix workstation connected to the sw itch's 
console port (either directly or via a modem). 


ZPut* 


Uses a Zmodem-compatible terminal emulation program to upload a Switch 
2000 configuration to a file in a PC or Unix workstation connected to the 
switch's console port (either directly or via a modem). 


*Can also be used to send the output of certain commands to a file on another device. Refer 
to chapter 6, "Using the Advanced Commands". 



Using Get and Put To Transfer a Configuration Between the 
Switch and a Networked PC or Unix Workstation 

To use Get or Put, you need the following: 

■ The IP or IPX address of the remote PC or Unix workstation that is acting 
as a TFTP server 

■ The name assigned to the configuration file you will use on the remote PC 
or Unix workstation 



N ote G et or Zget overwrites the switch's current configuration with the downloaded 

configuration. The switch then automatically reboots itself. 

1. From the Main Menu select Advanced Commands line. 

2. At the command prompt, execute one of the following commands: 

To upload a configuration to a file on a PC or Unix workstation: 
put IP_address CONFIG remote_file 
put IPX_address CONFIG remote_file 
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To download a configuration from a file on a PC or Unix workstation: 
get I P_address CONFIG remotefi le 
get I PX_address CONFIG remotefi le 

where: ip address or ipx address is the address of the PC or Unix 
workstation in which the configuration is to be stored. 

remote_file is the name of the configuration file in the PC or 
Unix workstation 



Using ZGet and ZPutTo Transfer a Configuration Between 
the Switch and a PC or Unix Workstation 

The PC or workstation must be operating as a VT100 or ANSI terminal, and 
can be connected either directly or via a modem to the switch's console port. 
Also, the PC or workstation must be running a Zmodem-compatible terminal 
emulation program. If a manager password has been set, you must log on to 
theswitch usingthat password in order to executetheZgetorZputcommands. 



N ote ZGet overwrites the switch's current configuration with the downloaded 

configuration. The switch then reboots itself. 



To use ZGet or ZPut, you need the name assigned to the configuration file on 
the PC or workstation. 

1. On the PC or workstation, start the Zmodem-compatible terminal emula- 
tion program, then follow the instructions provided with the program to 
prepare for a file transfer. 

2. From the switch's Main Menu select Advanced Commands line. 

3. At the command prompt, execute one of the following commands: 

To upload a configuration to a file on a PC or Unix workstation: 

zput config remote_file [overwrite] [dos/unix] 

To download a configuration from a file on a PC or Unix workstation: 

zget config remote_file [dos/unix] 

where: remote_file is the name of the file in which the configuration 
is stored 

[overwrite] is one of the following optional values: 
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0 (the default) allows a new file to be created, but 
does not allow an existing file to be overwritten. 

1 creates a new file or overwrites an existing file. 
[dos/unix] is one of the following optional values: 

0 (the default) specifies the DOS file format. 

1 specifies the Unix file format. 

If the PC or workstation does not respond to a ZP ut or ZGet command 
within approximately 70 seconds, the command times out and control 

returns to the Advanced Command line. 
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■ Troubleshooting Approaches 

■ Diagnosing with the LEDs 

■ Installation Problems 

■ Unusual Network Activity 

■ Diagnostic Tests 

■ Customer Support Services 

■ Replacement Instructions 



Troubleshooting Approaches 

There are four primary ways to diagnose switch problems: 

■ Checking the LEDs 

■ Checking the installation 

■ Checking the cables 

■ Checking the Console RS-232 interface 
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Diagnosing with the LEDs 

Most problems with the switch can be diagnosed using the LEDs on its front 
panel. This section describes: 

■ The normal LED pattern when the switch is being self-tested 

■ The LE D patterns that indicate error conditions on the switch 

LED Pattern During Self-Test 

Whenever the switch is powered on or reset, it performs a self-diagnostic test. 
During the self-test: 

1. All LEDs turn on momentarily, then all but the Power, Self-test, and Fault 
LEDs turn off. 

2. The Power LED remains on; the Self Test and Fault LEDs remain on for 
less than one minute. 

When a module is installed whilethe switch is operating, the Fault LED for 
the particular slot turns on momentarily while the switch executes a self-test 
of that slot. 

When the self-test completes successfully, the LE Ds go into their normal 
operational states. If a switch hardware fault exists, the switch will not 
complete self-test. This will be indicated by the Fault LED. 

Thetableson the fol low ing pages list theswitch's LEDs, their possible states, 
and diagnostic tips to resolve any error conditions. 

LED Error Indications 




Figure 9-1. System and Port LEDs with a 4-Port lOBase-T Module Installed 
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LED Error Indications 



LED 


State 


Diagnostic Tip 


Power 

(green) 


Off 


If the Power LED is off and the fans are not running, verify that the power cord is 
plugged into an active powersource and to the switch. M ake sure these connections 
are snug. Try power eye ling the switch by unplugging and plugging the switch back in. 

If the Power LED is still not on, verify that the AC power source works by plugging 
another device into the outlet. Or try plugging the switch into a different outlet or try 
a different power cord. 

If this condition persists, the switch may have failed. Call your HP-authorized LAN 
dealer or HP representative for assistance. 




On then 
turns off 


M ake sure the power cord connection is snug into the switch and into the power 
outlet. 

Verify that the fans are running and that the chassis intake vents and exhaust ports 
are clear, and that the area around them is unobstructed. 

Checkthe poweroutletforpowerlosses or surges. 

If this condition persists, the switch may have failed. Call your HP-authorized LAN 
dealer or HP representative for assistance. 


Fault 

(orange) 


Remains On 


The Fault LED should remain off during normal operation. If it is on, a self-test failure 
or a software error has occurred. Power cycle the Switch 2000. If this condition 
persists, the switch may have failed. Call your HP-authorized LAN dealer or HP 
representative for assistance. 




Flashing 


The switch is operable, but a fault condition has occurred in the switch or an installed 
module, a fan, or a connected redundant power supply (RPS). The corresponding fault 
LED for the affected component will flash simultaneously. Checkthe event log for an 
indication of the problem source. 


RPS 


Off 


Should be on if an RPS is installed and operating properly. 


(green) 




If there is an RPS problem, this LED is off and the Fault and Power Fault LEDs flash 
simultaneously. (Check the Event Log in the console user interface for further 
information on the failure.) Check the connection between the RPS and the power 
outlet. Verify that power is being supplied to the power outlet. Remove and then 
reinstall the RPS according to the documentation shipped with the RPS. If the fault 
condition continues, schedule down time and replace the RPS. 


Self-Test 

(green) 


On 


The Self-test LED should be steadily on (for up to 40seconds) only during the power- 
on, module installation, and reset self- tests. 




Flashing 


The Self-test LED flashes simultaneously with the Fault LED and a slot Fault LED if the 
slot has failed its self-test. Check the Event Log. (It also flashes during a reset if the 
Config Clear button is pressed.) 

If the self-test LED remains on at other times, especially in conjunction with the Fault 
LED, the switch may have failed. Call your HP authorized LAN representative for 
assistance. 
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LED Error Indications (continued) 



LED State Diagnostic Tip 



Power Fault Flashing Should be off if the main power supply and optional RPS (if installed) are operating 
(orange) properly. If there is a power problem with either the main power supply or the optional 

RPS, flashes simultaneously with the Fault LED (above). (Check the RPS LED and the 
Event Log in the console user interface for further information on the failure.) 

If an RPS is installed but the RPS LED is off, the RPS has failed. Schedule downtime 
and replace the RPS. 

If the RPS LED is on, then the main pow er supply has fa iled.Contactyour HP authorized 
LAN representative for assistance. 



Should be off if both fans are operating properly. 

If there is a fan problem, flashes simultaneously with the Fault LED. One or both fans 
in the Switch 2000 have failed. (Visually inspect the fans. Also check the Event Log in 
the console user interface for further information on the failure.) Contact your 
authorized HP LAN representative for assistance. 



Fan Fault Flashing 
(orange) 



Security 

(orange) 



Flashing Should remain off during normal operation. 

Flashes if an S N M P authentication failure has occurred or if a traffic filter violation 
has occurred. Use the ClearLED command in the console interface to clear this 
condition. (ClearLED turns off the Security LED if the condition causing the LED to flash 
has been corrected.) 

Fault (slot) Flashing A module is only partially installed in a slot. Causes the switch to suspend operation, 
(orange) rapidly Either remove the module or firmly install it in the slot. 

If a module is not installed properly, and the module slot Fault LED continues rapid 
flashing, other modules in the switch will continue to forward packets normally, but 
other switch functions will be suspended until the module is removed or properly 
installed. 

Flashing If this LED is flashing simultaneously with the Fault and Self-test LEDs, then there is a 
either a failure in the slot, module, or transceiver hardware, or an incorrect transceiver 
is installed in the module (if a J 3191A 100Base-T M odule or a J 3103A 100VG M odule 
is installed in the slot) . Remove the original module and install a different module in 
the slot. If the slot Fault LED remains flashing, then the problem is likely to be in the 
slot hardware and you should contact your HP authorized LAN representative. If the 
slot Fault LED remains off, then the problem is likely to be in the original module or a 
transceiver installed in that module. Attempt to isolate the problem to either the 
module or a transceiver, then contact your HP authorized LAN representative. 

Note: The Slot (fault) LED is steadily on during slot self-test. 
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LED State Diagnostic Tip 



The port is not enabled or the link is not operational. 

If the Switch 2000 port is either a lOBase-T port on an HP J 3102A Ethernet M odule or 
100Base-TX port (HP J 3192A or B transceiver) on an HP J 3191A 100Base-T M odule 
connected to a hub or another switch, then the port is preconfigured to operate as 
M Dl-X. In this case, ensure that the port on the connected hub or other switch is either 
an M Dl port connected by a straight-through cable, or (if the port on the other device 
is an 

M Dl-X port) that a crossover cable is used to connect them. 

Note: If an Ethernet port is using an AUI or 10Base2 transceiver, the port is enabled 
regardless of whether a connection is present. 



Rx and Tx Off The Rx and Tx LEDs should be on or flashing as packets are forwarded from or to other 

Port Receive ports. If the LEDs do not flash, check the Port Enabled (1, 2, 3, 4) LED. If it is off, the 

and Transmit port is not enabled. If the Port Enabled LED is on, then verify that the physical network 

(green) configuration is correct. Check the console interface for proper configuration and 

operation. 



Dx Off If the Port Enabled LED (above) is on, then the Full Duplex (Dx) LED should be on for 

(Full Duplex) Ethernet lOBase-T ports that have been configured for full-duplex mode. The Dx LED 

should be off for Ethernet lOBase-T ports that are disabled or have been configured 
for half-duplex operation (the default). Check the port configuration in the console 
interface to ensure thatthe M ode parameter for the port has been setto Full Duplex. 

Note: Full-duplex should be used only if it is also configured and supported on the 
media and in the device to which the port is connected. 



1, 2, 3, 4 Off 

(Port Enabled) 
(green) 
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By carefully following the installation procedures described in chapter 1, 
"Installing the Switch", you can avoid most problems caused by improper 
installation of the switch or one of its components. 

Incorrect Hardware Installation 

Incorrectly installing the switch or power cord can result in one or both of 
these components malfunctioning or notfunctioning at all. If one or both of 
these components appear not to be functioning, recheck the installation 
procedure and, if necessary, reinstall the component correctly. 

If the switch will not power on or intermittently resets itself, the switch's 
processor may be faulty or the hardware/software setup may be wrong. 

Console RS-232 Problems 

Iftheswitch powerson buttheconsoleinterfacewill notstartup, follow these 
steps: 

■ Check the external Console RS-232 connection. If you are not using a 
modem connection, ensure that the cable is a null modem cable. 

■ Check the console device settings against the settings listed in appendix 
C, Sample Console Configurations. 

■ Try a different baud rate setting in your console device. The Switch 2000's 
default setting, "Speed Sense", automatically matches the Console RS-232 
baud rate to the rate used by your PC, terminal, or modem. (However, if 
the Baud Rate parameter in the switch's Serial Link screen has been 
configured to a specific value, the Speed Sense operation is disabled.) The 
Switch 2000 operates at 300, 600, 1200, 2400, 4800, 9600, 19200, or 38400 
bps. 

■ If you are using a terminal emulation program, try exiting the program and 
then restarting it. 

If the diagnostic information does not appear, or i sun intel I igible, try changing 
the baud rate on your terminal or PC terminal emulator. Try 9600 first. If the 
problem continues, try each of the other rates listed above. 



Troubleshooting 

Installation Problems 

Cabling Problems 

A high percentage of network problems are due to faulty cabling. Cabling 
problems usually result in the failure of a switch to connect to a network, a 
hub, or the end nodes. 

Connections 

All cables attached to the switch should be checked to see that they are 
properly connected. 

If a PC or network devicecannot communicate through theswitch, check the 
following: 

■ The cable and its connection 

■ The LE D that corresponds to the network device 

If the PC or network device establishes a connection with theswitch (the port 
LED is on), but does not communicate reliably through the switch, check the 
cable and the connection. 

Non-standard Cables 

Miswired cables may cause numerous network collisions, and can seriously 
impair network performance. Before connecting cables into your network, 
you should verify that they comply with the applicable standards. For a list of 
compatible cables and a description of the pin-outs for each port on theswitch 
(which can be used to confirm the compatibility of unlisted cables), see 
appendix A, "Cables and Connectors". Note thattheoptional 100VG operation 
requires that all four pairs in a cable function properly. 

Topology 

It is important to make sure you have a valid network topology. Common 
topology faults include excessive cable length and excessive repeater delays 
between nodes. Refer to the following sources for further topology 
information: 

■ For connecting the Switch 2000 to other switches and hubs: HP 

Adva nceStack Swi tch 2000 Con necti vi ty Qu i ck Reference (shippedwith 
all Switch 2000 modules) 

■ For network design guidelines: An Introduction to Ethernet LAN 
Switches and Designi ng Switched Networks, both of which are included 
on the CD shipped with your switch. 
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Troubleshooting 

Unusual Network Activity 



■ For physical layer topology guidelines: 

Designing HP AdvanceStack Workgroup Networks available on the CD 
shipped with your switch. 

100VG Connection Problems 

If you are having trouble with a connection between a 100VG end node and a 
two-port 100VG module installed in the Switch 2000, try the following: 

1. Configure the 100VG port in the module to Master (MAC). 

2. If the connection still does not operate, use HPVGSET on the end node to 
set the 10/100 NIC on the end node to 100 mode. 



Unusual Network Activity 

Network activity that exceeds accepted norms often indicates a hardware 
problem with one or more of the network components, possibly including the 
switch. Unusual network activity is usually indicated by theLEDson the front 
of the switch or measured with the ASCI I console interface or with a network 
management tool such as the HP AdvanceStack Assistant. Refer to "Diagnos- 
ing with LEDs" earlier in this chapter for information on using LEDs to identify 
unusual network activity. 

Duplicate MAC Addresses Across VLANs. Duplicate MAC addresses on 
different VLANs are not supported and can cause VLAN operating problems. 
There are no explicit events or statistics to indicate the presence of duplicate 
MAC addresses in a VLAN environment. However, one symptom that may 
occur is that a duplicate MAC address can appear in the Port Address Table 
of one port, and then later appear to be linked to another port. (This can also 
occur in a LAN where thereare redundant paths between nodes and Spanning 
Tree is turned off.) For more information, refer to "VLAN Restrictions" on page 
7-21.) 
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Diagnostic Tests 



Diagnostic Tests 

If you believe that the switch is not operating correctly, you can test the 
switch's circuitry by removing, then reinstalling the switch's power cord. 

This procedure power-cycles the switch and executes the switch self-test. If 
the Fault LED stays on, the switch may havef ailed its self-test. See "Diagnosing 
with the LEDs" earlier in this chapter to interpret the LED display. 

Testing Twisted-Pair Cabling 

The twisted-pair cable attached to lOBase-T ports on the switch must be 
compatible with the IEEE 802.3 lOBase-T standard for Cat. 3 cable. Similarly, 
the twisted-pair cable attached to 100Base-T ports on the switch must be 
compatible with the IEEE 802. 3u 100Base-TX standard for Cat. 5 cable. To 
verify that your cable is compatible with this standard, use a qualified cable 
test device. HP also offers a wire testing service. Contact your HP-authorized 
LAN dealer or your local HP sales office for more information. Refer also to 
"Recommended Cables" on page A-2. 

Note that the optional 100VG operation requires that all four pairs in a cable 
function properly. 

Testing End-to-End Network Communications 

Both the switch and the cabling can be tested by running an end-to-end 
communications test — a test that sends known data from one network device 
to another through the switch — such that you can verify that the data was 
correctly transmitted between the devices. For example, if you have two PCs 
on the network that have HP LAN adapter cards, you can use the "Link Test" 
option from the card's test program to verify the entire communication path 
between the two PCs. 

See your LAN adapter card's manual for information on running an end-to-end 
communication test. 
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Testing Switch-to-Device Network Communications 

You can do the following communication tests to verify that the network is 
operating correctly between the switch and any connected device that can 
respond correctly to the test. 

■ Link Test — a physical layer test that sends IEEE 802.2 test packets to any 
device identified by its MAC address 

■ Ping Test— a network layer test used on IP networks that sends test 
packets to any device identified by its IP address 

■ IPX Ping Test— a network layer test used on IPX networks that sends test 
packets to any device identified by its IPX address 

These tests can also be done from an SNMP network management station 
running a program that can manage the switch; for example, HP AdvanceStack 
Assistant. 



Customer Support Services 

Hewlett-Packard offers switch support 24 hours a day, seven days a week 
through the use of automated electronic services including: 

■ World Wide Web 

■ Hewlett-Packard FTP Library Service on the Internet 

■ CompuServ 

■ Hewlett-Packard BBS 

■ HP FIRST FAX Retrieval Service 

■ HP Network Phone-In Support (NPS) 

These services are described on the card at the front of this manual. 

Your reseller can also provide you with assistance, both with services that 
they offer and with services offered by Hewlett-Packard. 
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Cables and Connectors 



■ Recommended Cables 

■ Twisted-Pair Cable/Connector Pin-Outs 

■ Twisted-Pair Cable Pin Assignments 

■ RS-232 Connector and Cable Pin-Out 

This appendix lists cables that have been tested and verified for use with the 
Switch 2000. It also includes minimum pin-out information so, if you wish to 
use an unlisted cable, you can verify that the cables used in your installation 
are correctly wired. Note that each pin-out diagram does not necessarily 
match the pin-out for the corresponding HP cable, but cables manufactured 
to follow the minimum pin-out will function correctly. 



N ote Incorrectly wired cabling is the most common cause of problems for LAN 

communications. HP recommends that you work with a qualified LAN cable 
installer for assistance with your cabling requirements. 
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Cables and Connectors 

Recommended Cables 



Recommended Cables 



Cable Function 


Port Type on PC, 
or Modem 


Cable Type 


Specification orHP Product Number 




module-based or trans- 
ceiver-based RJ -45 
connection from switch 
to networked device 




Twisted-pair "straight- 
through" cable 


Hewlett-Packard recommends category 
5 or better, four-pair, lOOohm unshielded 
twisted-pair (UTP) cable. (Category 5 
cable is required for 100Base-T Twisted- 
pair connections.) 


Transceiver-based SC 
fiber-optic connection 
from switch to 
networked devices 




M ultimode Fiber-Optic 
cable 


1300nm wavelength cable conforming to 
the ISO/I EC 793-2 type Bland ITU-T G.652 
standards 




Connecting the PC 
directly to the switch's 
Console RS-232 port 


9-pin male 
25-pin male 


RS-232-C9-pinfemaleto 
9-pin female null modem 
or "crossover" cable 

RS-232-C9-pinfemaleto 
25-pin female null 
modem or "crossover" 
cable 


RS-232-C cable provided with the switch 
(HP p/n 5182-4794) 

HP 24542H 


Connecting a modem to 
the switch's Console 
RS-232 port 


25-pin female 


RS-232-C9-pinfemaleto 
25-pin male standard 
modem or "straight- 
through" cable 


HP 24542M 



You can contact your HP-authorized dealer or (in the U.S.A.) call HP at 
1-800-538-8787 to order these parts. 



A-2 



Cables and Connectors 

Twisted-Pair Cable/Connector Pin-Outs 



Twisted-Pair Cable/Connector Pin-Outs 

Twisted-Pair Cable from Switch-Based MDI-X Moduleor 
Transceiver to an MDI Networked Device 

To connect PCs or other MDI network devices to an MDI-X port on the switch, 
use a "straight-through" cable. The twisted-pair wires must be twisted through 
the entire length of the cable. The wiring sequence must conform to AT&T 
258A (not USOC). See "Twisted-Pair Cable Pin Assignments" on pageA-6for 
a listing of the signals used on each pin. 




i 



white/gre_en 
green/white 



N ote Pins 1 and 2 must be wired to a twisted pair. 

Pins 3 and 6 must be wired to a twisted pair. 

Pins 4, 5, 7, and 8 are not used in this application, although they may 
be wired in the cable. 
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Cables and Connectors 

Twisted-Pair Cable/Connector Pin-Outs 



Twisted-Pair Cable from Switch-Based MDI-X Module to an 
MDI-X Hub Port 

To connect an MDI-X port on a hub to an MDI-X port on the switch, use a 
"crossover" cable. The twisted-pair wires must be twisted through the entire 
length of the cable. The wiring sequence must conform to AT&T 258A (not 
USOC). See "Twisted-Pair Cable Pin Assignments" on pageA-6 for a listing of 
the signals used on each pin. 




Crossover Cable 






A 


white/orange 


UN 


I i 

I X— 




orange/white 


1 : 

i i 


i 






i~r 


i 
i 




white/green 




i green/white i 



N ote Pins 1 and 2 on connector "A" must be wired as a twisted pair to pins 3 and 6 

on connector "B". 

Pins 3 and 6 on connector "A" must be wired as a twisted pair to pins 1 and 2 
on connector "B". 

Pins 4, 5, 7, and 8 are not used in this application, although they may be wired 
in the cable. 



Cables and Connectors 

Twisted-Pair Cable/Connector Pin-Outs 



Twisted-Pair Cable for HP 100VG LAN Ports 

To connect a server or other devices to the 100VG LAN ports, use a "straight- 
through" 4-pair twisted-pair cable. The twisted-pair wires must be twisted 
through the entire length of the cable. 

The illustration below shows the RJ -45 pin connections, color code, and pair 
configuration for an H P 100VG LAN cable (unbundled) that conforms to the 
EIA/TIA 568B wiring standard for a straight-through cable. 




Straight-through cable 



Pair 4 



Pair 1 



white /brown 



brown/white 



blue/white 



white/blue 



white/orange 



Pair 2 



orange/white 



white/green 



Pair 3 



green/white 




1234567 8 



1 



N ote Pins 1 and 2 must be wired to a twisted pair. 

Pins 3 and 6 must be wired to a twisted pair. 
Pins 4 and 5 must be wired to a twisted pair 
Pins 7 and 8 must be wired to a twisted pair. 
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Twisted-Pair Cable Pin Assignments 



Twisted-Pair Cable Pin Assignments 

Twisted-Pair Straight-Through Cable for a 10/100Base-T 
Connection From the Switch to a Networked Device 



End Node (NIC or Transceiver) 
Switch End (MDI-X) or Other M Dl Port 



Signal 


Pins 


Pins Signal 


(receive +) 


1 


1 (transmit +) 


(receive -) 


2 ■* 


2 (transmit-) 


(transmit +) 


3 


— +■ 3 (receive +) 


(transmit-) 


6 


— +- 6 (receive-) 


Twisted-Pair Crossover Cable for Module-Based 


10/100Base-T Connection from the Switch 


to an MDI-X Port 








Switch Port or Other 


Switch End (MDI-X) 


MDI-X Port 


Signal 


Pins 


Pins Signal 


(receive +) 


1 - — 


3 (transmit +) 


(receive -) 


2 - 


6 (transmit-) 


(transmit +) 


3 


1 (receive +) 


(transmit-) 


6 


*■ 2 (receive-) 
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RS-232 Connector and Cable Pin-Outs 



RS-232 Connector and Cable Pin-Outs 



The switch's Console RS-232 connector is wired as if it is a terminal (DTE), 
ready to beconnected to a modem (DCE).Theswitch includesa null modem 
cable that can be used to directly connect a PC to be used as the console. To 
connect a modem to the switch, use a standard RS-232-C modem cable. 

This section provides pin assignment information for the cables you can use 
on the RS-232 port. 

Pin-Out for Switch's RS-232 Port Connector 



PIN 


US 


CCITT 


DIN 


1 


DCD 


109 


M5 


2 


Rx 


104 


D2 


3 


Tx 


103 


Dl 


4 


DTR 


108 


SI 


5 


GND 


102 




6 


DSR 


107 


Ml 


7 


RTS 


105 


S2 


8 


CTS 


106 


M2 


9 


Rl 


125 


M3 
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Cables and Connectors 

RS-232 Connector and Cable Pin-Outs 



RS-232-C "Null Modem" Cable 

This cable type is supplied with the switch for connection to a PC having a 
9-pin connector. 



PC End 
9-pin male 



Switch End 
9- pin male 




DCD 

Rx 

Tx 

DTR 

GND 

DSR 

RTS 

CTS 

Rl 



Minimum Cable Pin-out for Direct Console Connection 



PC End 
9-pin male 

2 

3 

5 

1 

4 

6 

7 



Switch End 
9-pin male 

2 

3 

■5 



Rx 
Tx 
GND 
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RS-232 Connector and Cable Pin-Outs 

RS-232 Modem Cable 



Modem 

(DCE) End Switch End 

25-pin male 9-pin male Signal 

2 ■+ 3 Tx 

3 +■ 2 Rx 

4 ■+ 7 RTS 

5 8 CTS 

6 +■ 6 DSR 

7 5 GND 

8 ► 1 CDORDCD 

20 ■+ 4 DTR 

22 +■ 9 Rl 

23 •* DRS- typically on V.24 (European) modems 

(not connected) 
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B 



Specifications 



Physical 



Width: 44 cm (17.3 in) 

Depth: 30 cm (11.8 in) 

Height: 18 cm (7.0 in) 

W eight (without Modules or RPS: 7.86kg (17.3 lbs) 



Electrical 

AC voltage: 100 - 127 volts 200-240 volts 

Maximum current: 2.5A max 1.5A max 

Frequency range: 50/60 Hz 50/60 Hz 



Environmental 

Operating Non-Operating 

Temperature: 0°C to 55°C (32°F to 131°F) -40°C to 70°C (-40°F to 158°F) 

Relative humidity: 15% to 95% at 40°C (104°F) 15% to 90% at 65°C (149°F) 

(non-condensing) 

Maximum altitude: 4.6 km (15,000 ft) 4.6 km (15,000 ft) 
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Specifications 



Connectors 

The RS-232-C console port conforms to V.22 bis. 



Electromagnetic 

Emissions: FCC part 15 Class A 

EN 55022/ CISPR-22 Class A 
VCCI Level I 

Complies with Canadian EM C Class A requirements. 



Immunity: See the Declaration of Conformity for details atthe end of the 
Regulatory Statements in this guide. 



Safety 

EN60950(1992) + Al, A2 / 1 EC950: 1991 +A1, A2 
UL 1950 
CSA 950 

NOM-019-SCFI-1993 
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Sample Console Configurations 



Windows 3.1Terminal Application 

You can use a PC with the Windows 3.1 Terminal Application for console 
management access to the switch. This section provides an example of the 
configuration settings to use with the Windows 3.1 Terminal Application. 

Option Settings: 

■ Terminal Emulation: DEC VT-100 (ANSI) 

■ Terminal Preferences: 

• Terminal Modes: 

Line-Wrap: On 
Sound: On 

• CR>CR/LF:No 

• Use Function, Arrow, Ctrl keys for Windows: NO 
Communications: 

■ 9600 Baud or 19.2 baud recommended 

■ No Parity 

■ 8 bits 

■ 1 stop bit 

■ Xon/Xoff 

■ Carrier Detect 
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Sample Console Configurations 

Procomm Plus V2.01 



Procomm Plus V2.01 

Terminal Options 

■ Terminal Emulation: VT-100 

■ Duplex: FULL 

■ Software Flow Control: Xon/Xoff 

■ Hardware Flow Control: Off 

■ Screen Scroll: ON 

■ CR Translation: CR 

■ BS Translation: NON-DESTRUCTIVE 

■ Break Length: 350 

■ Enquiry: CIS B 

■ ANSI 7 or 8 bit command: 7 bit 

■ ASCII Protocol Options 

■ Echo Locally: NO 

■ Expand Blank Lines: NO 

■ Expand Tabs: YES 

■ Clear pacing: 1 ms 

■ Line pacing: 1 

■ Pace character: 0 

■ Strip 8 bit: NO 

■ ASCII download timeout: 10 

■ CR translation (upload): NONE 

■ LF translation (upload): NONE 

■ CR translation (download): NONE 

■ LF translation (download): NONE 
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Sample Console Configurations 

Other Terminal Emulators 



Other Terminal Emulators 



For other communication programs, use thefol lowing table as a configuration 
guide: 



Option 


Setting 


Baud rate 


300, 600, 1200, 2400, 9600, 19200, or 38400. 




(9600 or 19200 recommended) 


Parity 


None 


Data hire: and cj-nn hiK 


8 1 

o, ± 


AnrnhanH nnnn hrpak - 


On 


H a nH^haldnn 

iiaiiUjiiaixiiiy 


N one 


Terminal emulation 


VT100. For W indows, disable the "Use Function, Arrow, 




a nH Ctrl K"p\/c; fnrWinHnwc;" nntinn Inr atpH in thp 

a 1 1 u v ■ u 1 1 i\cy j iui vv iiiuuvvd uuliuii, iulolcu hi liic 




Terminal Preference menu. 


Duplex 


Full 


Soft flow control (XON/XOFF) 


On (input and output) 


Hard flow control (RTS/CTS) 


Off 


Line wrap 


On 


Screen scroll 


On 


CR translation 


CR 


Backspace (BS) 


Destructive 


translation 




Break length (milliseconds) 


350 


Enquiry (ENQ) 


Off 


EGA/VGA true underline 


Off 


Terminal width 


80 


ANSI 7 or 8 bit commands 


7 
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Switch Reference 



Front of Switch 

All LEDs used by the Switch 2000 are on the front panel. During the power-on 
or reset cycles, all LE Ds are on. 

Switch Status LEDs 
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Switch Reference 

Front of Switch 



LED 


State 


M eaning of LED 


Power 

(green) 


on 


The switch is receiving power from the main power supply and/ 
or from the optional RPS (redundant power supply). 




off 


The switch is not receiving power. See chapter 9, 
"Troubleshooting". 


Fault 

(orange) 


on 

(steady) 


Eitherthe switch hardware has failed the self-testor a software 
error has occurred and auto-reboot is off. In this case, push the 
Reset button. See chapter 9, "Troubleshooting". 




flashing 


The switch is operable, but a fault condition has occurred in the 
switch, an installed module, a fan, or a redundant power supply 
(RPS- if installed). The corresponding fault LED for the affected 
component will flash simultaneously. Refer to chapter 9, 
"Troubleshooting". 


RPS 

(green) 


nn 


r\ii \u u liu ii a i / r\c u u 1 1 u □ 1 1 l ruvvci j u uu ly 10 l u i i i i c l lc u a i iu 

functioning properly. 




off 


NoRPSkronnprtpdtothp'iwitTh orthpRPShrKfailpd Spp 

li u 1 \ 1 -J \J V_ yj 1 1 1 1 L_ V_ LV_ \A LU LM L J liV 1 II / L/ 1 LI 1 V_ l\l -J 1 IU J 1 U ML U ■ J L L 

chapter 9, "Troubleshooting". 


Self-test 


Off 


Normal operation, except as described below. 


(green) 


on 

(steady) 


Power-on or resetself-test. During this time the Fault LED is also 
on and the switch is inoperable. 




flashing 


Indicates one of the following: 

• A self-test failure has occurred, butthe switch remains 
partially operable. 

• The Config Clear button is being pressed during a reset. 
Release the button. (Refer to "Reset and Config Clear Buttons" 
on page D-4.) 


Power 
Fault 

(orange) 


flashing 


An RPS (redundant power supply) is present and eitherthe RPS 
or the main power supply is not operating properly. Flashes 
simultaneously with the switch's Fault LED. Refer to chapter 9, 
"Troubleshooting". 


Fan Fault 

(orange) 


flashing 


One or both ventilation fans are not operating properly. Flashes 
simultaneously with the switch's Fault LED. Refer to chapter 9, 
"Troubleshooting". 


Security 

(orange) 


flashing 


Either an SN M P Authentication failure or a traffic filter violation 
has occurred. Refer to chapter 9, "Troubleshooting". 



D-2 



Switch Reference 

Frontof Switch 



Slot and Port Status LEDs 




Figure D-2. Example of Slotand PortStatus LEDsfora lOBase-T Module in the Switch 2000 



Fault(slot) 


rapid flash 


A module hot-swap condition is occurring. 


(orange) 


slow 
flashing 


Either the indicated slot has failed self-test or an incorrect 
transceiver (for a J 3191A 100Base-T M odule or a J 3103A 100VG 
M odule) has been installed. For this condition, flashes 
simultaneously with the switch's Fault and Self-test LEDs. Refer 
to chapter 9, "Troubleshooting". 


1,2,3,4 
(port 
enabled 
LED) 

(green) 


on 


The indicated port on the indicated module is enabled and the 
link is operational. 


Tx 

(green) 


on or 
flashing 


The indicated port is transmitting packets. 


Rx 

(green) 


on or 
flashing 


The indicated port is receiving packets. 


Dx 

(green) 


on 


The indicated port is enabled and configured for full-duplex 
operation. 
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Front of Switch 



Reset and Config Clear Buttons 




Figure D-3. Reset and Config Clear Buttons on the Switch 2000 
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Switch Reference 

Frontof Switch 



Button Action 




Reset Performs a software and hardware reset, including a hardware self-test. (This 
achieves the same result as disconnecting the power from the switch, then 
reconnecting it.) 



Config When used as described below, causes the switch to delete the current 
Clear configuration, and to rebootto a default configuration based on the installed 
modules and transceivers. This resets the switch to the factory default and is 
a drastic action that interrupts switch operation and can seriously diminish or 
even halt network operation. Depending on the current network operating 
condition, it may be best to avoid a reset until you can schedule system 
downtime. Some reasons for a reset include: 

• The switch appears to be malfunctioning, and pressing just the Reset button 
does notclearthe problem. 

• Several elements in the configuration may be inconsistentwith each other 
and it is more efficient to startwith the defaults than to try to adjust individual 
parameters. 

Effects of a reset to the factory default: 

• Clears all passwords. 

• Configures the switch as a multiport transparent bridge with Bootp enabled. 
The switch then transmits Bootp requests until either a Bootp reply is 
received or the retransmission timeout of approximately 1 minute is reached. 
(If the switch receives a reply from a Bootp server, the switch restarts itself 
for operation according to the configuration received from the Bootp server. 
Refer to appendix E, "Bootp Operation".) 

• Returns all configuration parameters to their factory default settings. (Turns 
off the Spanning Tree Protocol.) 

• Clears the event log. 

• Runs the system self-test. 



To clearthe current configuration and reboot the switch: 

1. Press and release the Reset button. All LEDs turn on momentarily. 

2. While all LEDs are turned on, press and hold the Config Clear button until the 
Self-test LED begins flashing, then immediately release the Config Clear button. 
If a console is connected, you will see the follow ing message when the switch 
has reset itself to the factory default configuration and rebooted. 

Waiting for speed sense. Press enter to continue. 

3. Press [Em57] to restart the console. 
To clearthe password(s) 

Press and release the Config Clear button. 
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Switch Reference 

Front of Switch 



Console RS-232 Port 

The switch's Console RS-232 port is a standard RS-232 serial link used to 
connect a Windows-based PC, a terminal, or a modem. (For pinouts, refer to 
appendix A, Cables and Connectors.) 




Figure D-4. Front Panel of the Switch 2000 



Interface Module Expansion Slots 

The Switch 2000 offers six universal port expansion slots, each of which can 
accept any Hewlett-Packard module designed for the Switch 2000. 



D-6 



Switch Reference 

Back of the Switch 



Back of the Switch 



AccessforRPS Power Connector with 
installation Power Cable Installed 




































s §> 




f 











Figure D-5. Back Panel of the Switch 2000 

Power Connector 

The Switch 2000 does not have a power switch; it is powered on when the 
power cord is plugged into the power connector. The switch's power supply 
automatically adjusts to any AC power source between 90 and 240 volts. There 
are no voltage or frequency range settings needed. 
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Switch Reference 

Back of the Switch 



HP J 3136 AdvanceStack Switch 2000 Redundant Power Supply 
(RPS-Optional) 

The RPS is an optional power supply you can connect to your Switch 2000 for 
backup power in case the main power supply fails. Also, adding an RPS to 
your switch helps to extend the life of the main power supply because the two 
power units work together to share the power load. For more on the RPS, refer 
to "Install the Redundant Power Supply (Optional)" on page 1-5, and to the 
documentation provided with the RPS. 



Caution Power to the Switch 2000 should be off before you install the RPS. For this 

reason, you should perform an RPS installation only during a scheduled down 
time, when you can remove power from the switch. 

Refer to the documentation provided with the RPS before connecting it to the 
Switch 2000. 
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BOOTP Operation 



Overview 



Bootp is used to download configuration data from a Bootp server to the 
switch or to a VLAN configured on the switch. Either a minimal IP configura- 
tion or a full configuration can be retrieved from the Bootp server. 



N ote The Switch 2000 supports only the DHCP (Dynamic Host Configuration 

Protocol) implementations that are backwards compatible with Bootp. 



The Bootp Process 

Whenever the switch reboots with the IP Config parameter set to Use Bootp 
(the default), Bootp requests are broadcast on all local networks. When the 
Bootp server receives the request it searches its Bootp database for a record 
entry that matches the MAC address in the Bootp request. If a match is found, 
the configuration data in the associated database record is returned to the 
switch. For most Unix systems, the Bootp database is contained in the 
/etc/bootptab file. 
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Bootp Database Record Entries 

Bootp Database Record E ntries 

An entry in the Bootp table file /etc/bootptab to update an IP address 
and subnet mask to the switch or a VLAN configured in the switch would be 
similar to this entry: 

j3100switch: \ 
ht=ether : \ 
ha=080009123456:\ 
sm=255.255.248.0:\ 
lg=11.22.33.44:\ 
hn:\ 

ip=55.66.77.88:\ 
vm=rfcl048 

An entry in the Bootp tablefile /etc/bootptab to tell the switch or VLAN 
where to obtain a configuration file download would be similar to this entry: 

j3100switch: \ 
ht=ether : \ 
ha=080009123456:\ 
sm=255.255.248.0:\ 
lg=11.22.33.44:\ 
hn: \ 

ip=55.66.77.88:\ 
Tl44="switch. cfg" : \ 
vm=rfcl048 

where: 

j3100switch is a user-defined symbolic name to help you find the correct section of the 



bootptab file. If you have multiple switches that will be using Bootp to get their 
IP configuration, you should use a unique symbolic name for each switch. 

ht is the "hardware type" . For the HP AdvanceStack Switch 2000, set this to ether 

(for Ethernet). This tag must precede the ha tag. 

ha is the "hardware address" .Use the switch's (or VLAN 's ) 12-d ig it MAC address. 

sm is the subnet mask of the subnet in which the switch (or VLAN) is installed. 

Ig TFTP server address (source of final configuration file) 

hn send nodename (boolean flag, no "=value" needed) 

ip is the IP address to be assigned to the switch (orVLAN). 

T144 is the vendor-specific "tag" identifying the configuration file to download. 

vm is a required entry thatspecifies the Bootp report format. For the HP 

AdvanceStack Switch 2000, setthis parameter to rfc 1048. 
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Configuring Bootp 



Configuring Bootp 

In its default configuration, the switch is configured for Bootp operation. 
However, if an IP address has previously been configured or if the ip Conf ig 
parameter has been set to Disabled, then you will need to use this procedure 
to reconfigure the parameter to enable Bootp operation. 

This procedure assumes that a Bootp database record has already been 
entered into an appropriate Bootp server, and that the necessary network 
connections are in place. 

To configure the switch or a VLAN for Bootp: 

1. In the Main Menu, Select Configuration . 

2. In the Configuration screen select internet (ip) Service. 

3. Press (T) (for Edit mode), then use (T) to move the cursor to the 
ip config parameter field. 

4. Use the Space bar to select the use Bootp option for the ip config 
parameter. (This disables access to the IP Address, Subnet Mask, and 
Gateway parameters.) 

5. Press [Enter] to exitfrom edit mode, then press [s] to save the configuration 
change. 

When you reboot the switch with Bootp enabled, it will do one of thefol lowing: 

■ Receive a minimal configuration (IP address and subnet mask). 

■ If the reply provides information for downloading a configuration file, the 
switch then usesTFTP to download the file from the designated source, 
then reboots itself. (This assumes that the switch or VLAN has connectiv- 
ity to theTFTP file server specified in the Bootp database configuration 
record and that the Bootp database record is correctly configured.) 
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MAC Address Management 



Overview 



The Switch 2000 assigns MAC addresses in the following three areas: 

■ Default MAC address assigned at the factory 

■ Automatically assigned MAC address(es) corresponding to any VLANs 
you configure in the switch 

■ The Spanning Tree Protocol (STP) uses either the default MAC address 
for the switch or, if VLANs are configured, the MAC addresses automati- 
cally assigned to the VLANs. 
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MAC Address Management 

Switch (Default) MAC Address 



Switch (Default) MAC Address 

A default MAC address is assigned to each Switch 2000 at the factory. This 
address is on the label below the Console RS-232 port (shown below): 
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Label Showing 
Default MAC Address 

Figure F-l. Location of the Default MAC Address Assigned to the Switch 

If there are no VLANs configured on the Switch 2000, then the factory-assigned 
MAC address is the same for all ports on the switch. 

To display the MAC address assigned to a port: 

1. Select status and Counters from the Main Menu. 

2. Select Port Counters in the Statistics menu. 

3. Select the desired port. 

4. Select the show details option to display the port counter details for 
the selected port. Included will be the MAC address assigned to that port. 
If VLANs are configured, refer to "VLAN MAC Address" on page F-3. 
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VLAN MAC Addresses 



VLAN MAC Addresses 



If you add VLANs to the Switch 2000, each VLAN is automatically assigned a 
different MAC address. All ports in a particular VLAN will have the same MAC 
address. To determine the MAC address assigned to a particular VLAN, display 
the port data for any port assigned to that VLAN . 

To display the MAC address and other data for a selected port: 

1. From the Main Menu, select Status and Counters. 

2. Display the Port Counters screen. 

3. Select a port that is assigned to the VLAN for which you want to determine 
the corresponding MAC address. 

4. Select the show details option to display the port counter details for 
the selected port. Included will bethe MAC address assigned to that port 
(and the corresponding VLAN). 
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Figure F-2. Example of the Port Counter Details for a Selected Port 
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MAC Addresses (for Spanning Tree Operation) 



MAC Addresses (for Spanning Tree 
Operation) 

When no VLANs are configured, STP uses the MAC address assigned to the 
switch. (This is the MAC address printed on the label on the front of the 
switch.) When VLANs are configured, STP must be configured separately for 
each VLAN. In this case, the MAC address assigned to each instance of STP is 
the MAC address assigned to the corresponding VLAN. These addresses 
appear in the Spanning Tree Information screen . Refer to the "Switch 
(Default) MACAddress"on page F -2, or "VLAN MAC Addresses" on pageF-3.) 
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Safety Information 



Safety Symbols. 




Documentation reference symbol. If the product is marked with this 
symbol, refer to the product documentation to get more information 
aboutthe product. 



WARNING 



A WARNING in the manual denotes a hazard thatcan cause injury 
or death. 



CAUTION 



A CAUTION in the manual denotes a hazard that can damage 
equipment. 



Do not proceed beyond a WARNING or CAUTION notice until you have understood the 
hazardous conditions and have taken appropriate steps. 



Grounding. 

These are safety class I products and have protective earthing terminals. There 
must be an uninterruptible safety earth ground from the main power source 
to the product's input wiring terminals, power cord, or supplied power cord 
set. Whenever it is likely that the protection has been impaired, disconnect 
the power cord until the ground has been restored. 

For LAN cable grounding: 

■ If your LAN covers an area served by more than one power distribution 
system, be sure their safety grounds are securely interconnected. 

■ LAN cables may occasionally be subject to hazardous transient voltages 
(such as lightning or disturbances in the electrical utilities power grid). 
Handle exposed metal components of the network with caution. 

Servicing. 

There are no user-serviceable parts inside these products. Any servicing, 
adjustment, maintenance, or repair must be performed only by service-trained 
personnel. 

These products do not have a power switch; they are powered on when the 
power cord is plugged in. 
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Informations concernant la securite 



Symboles de securite 



Symbole de reference a la documentation. Si le produit estmarque 
de ce symbole, reportez-vous a la documentation du produitafin 
d'obtenirdes informations plus detaillees. 

Dans la documentation, un WARNING indique un danger 
susceptible d'entramer des dommages corporels ou la mort. 

Un texte de mise en garde intitule CAUTION indique un danger 
susceptible de causer des dommages a I'equipement. 

Ne continuez pas au-dela d'une rubrique WARNING ou CAUTION 
avantd'avoir bien compris les conditions presentant un danger et 
pris les mesures appropriees. 



Cetappareil estun produit declasse I et possedeune borne demise a la terre. 
La source d'alimentation principale doit etre munie d'une prise de terre de 
securite instal lee aux bornesdu cablaged'entree, sur I e cordon d'alimentation 
ou lecordon deraccordementfourni avec leproduit. Lorsquecette protection 
semble avoir ete endommagee, debrancher le cordon d'alimentation jusqu'a 
ce que la mise a la terre ait ete reparee. 

Mise a la terre du cable de reseau local: 

■ si votre reseau local s'etend sur une zone desservie par plus d'un systeme 
de distribution de puissance, assurez-vous que les prises de terre de 
securite soient convenablement interconnects. 

■ Les cables de reseaux locaux peuvent occasionnellement etre soumis a 
des surtensions transitoires dangereuses (telles que la foudre ou des 
perturbations dans le reseau d'alimentation public). Manipulez les 
composants metalliques du reseau avec precautions. 

Aucune piece contenue a I'interieur de ce produit ne peut etre reparee par 
I'util isateur. Tout depannage, reglage, entretien ou reparation devra etre 
confie exclusivement a un personnel qualifie. 

Cetappareil necomporte pasdecommutateur principal ; la mise sous tension 
est effectuee par branchement du cordon d'alimentation. 



A 

WARNING 
CAUTION 
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Hinweise zur Sicherheit 



Sicherheitssymbole. 



A 



Symbol fur Dokumentationsverweis. Wenn das Produkt mit diesem 
Symbol markiert ist, sc hlagen Sie bitte in der Produktdokumentation 
nach, urn mehr Informationen u ber das Produkt zu erhalten. 



WARNING 



Eine WARNING in der Dokumentation symbolisierteine Gefahr, die 
Verletzungen odersogarTodesfalle verursachen kann. 



CAUTION 



CAUTION in der Dokumentation symbolisiert eine Gefahr, die das 
Gerat beschadigen kann. 



Fahren Sie nach dem Hinweis WARNING oder CAUTION erst fort, nachdem Sie den 
Gefahrenzustand verstanden und die entsprechenden M aSnahmen ergriffen haben. 



Dies ist ein Gerat der Sicherheitsklasse I und verfugt iiber einen schutzenden 
Erdungsterminal. Der Betrieb des Gerats erfordert eine ununterbrochene 
Sicherheitserdung von der Hauptstromquelle zu den Gerateingabeterminals, 
den Netzkabeln oder dem mitStrom belieferten Netzkabelsatz voraus. Sobald 
Grund zur Annahme besteht, daB der Schutz beei ntrachtigt worden ist, das 
Netzkabel aus der Wandsteckdose herausziehen, bis die Erdung 
wiederhergestellt ist. 

Fur LAN-Kabel erdung: 

■ Wenn Ihr LAN ein Gebiet umfaBt, das von mehr als einem 
Stromverteilungssystem beliefert wird, miissen Sie sich vergewissern, 
daB die Sicherheitserdungen fest untereinander verbunden sind. 

■ LAN-Kabel konnen gelegentlich gefahrlichen Ubergangsspannungen 
ausgesetzt werden (beispielsweise durch Blitz oder Storungen in dem 
Starkstromnetzdes Elektrizitatswerks). Bei der Handhabungexponierter 
Metallbestandteile des Netzwerkes Vorsicht walten lassen. 

Dieses Gerat enthalt innen keine durch den Benutzer zu wartenden Teile. 
Wartungs-, Anpassungs-, Instandhaltungs-oder Reparaturarbeiten durfen nur 
von geschultem Bedienungspersonal durchgefuhrt werden. 

Dieses Gerat hat keinen Netzschalter; es wird beim AnschlieBen des 
Netzkabels eingeschaltet. 
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Considerazioni sulla sicurezza 



Simboli di sicurezza. 



A 



Simbolo di riferimento alia documentazione. Se il prodotto e 
contrassegnato da questo simbolo, fare riferimento alia 
documentazione sul prodotto per u Iter io ri informazioni su di esso. 



WARNING 



La dicitura WARNING denota un pericolo che pub causare lesioni o 
morte. 



CAUTION 



La dicitura CAUTION denota un pericolo che puo danneggiare le 
attrezzature. 



Non procedere oltre un avviso di WARNING o di CAUTION prima di avercompreso le 
condizioni di rischio e aver provveduto a 1 1 e misure del caso. 



Questo prodotto e omologato nella classe di sicurezza I ed ha un terminale 
protettivo di collegamento a terra. Dev'essere installato un collegamento a 
terra di sicurezza, non interrompibile che vada dalla fonte d'alimentazione 
principale ai terminali d'entrata, al cavo d'alimentazione oppure al set cavo 
d'alimentazione fornito con il prodotto. Ogniqualvolta vi sia probability di 
danneggiamento del la protezione, disinserite il cavo d'alimentazione fino a 
quando il collegamento a terra non sia stato ripristinato. 

Per la messa a terra dei cavi LAN: 

■ sela vostra LAN copreun'area servita da piu di un sistema di distribuzione 
elettrica, accertatevi che i collegamenti a terra di sicurezza siano ben 
collegati fra loro; 

■ i cavi LAN possonooccasionalmenteandaresoggetti a pericolosetensioni 
transitorie (ad esempio, provocate da lampi o disturbi nella griglia 
d'alimentazione del la societa elettrica); siate cauti nel toccare parti 
esposte in metal lo del la rete. 

Nessun componente di questo prodotto puo essere riparato dall'utente. 
Qualsiasi lavoro di riparazione, messa a punto, manutenzione o assistenza va 
effettuato esclusivamente da personale specializzato. 

Questo apparato non possiede un commutatore principale; si mette scotto 
tensione all'inserirsi il cavo d'alimentazione. 
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Consideraciones sobre seguridad 

Si'mbolos de seguridad. 

Simbolo de referenda a la documentacion. Si el producto va 
marcado con este simbolo, consultar la documentacion del 
producto a fin de obtener mayor informac ion sobre el producto. 

WARNING Una WARNING en la documentacion senala un riesgo que podna 

resultar en lesiones o la muerte. 

CAUTION Una CAUTION en la documentacion senala un riesgo que podria 

resultar en averias al equipo. 

No proseguir despues de un simbolo de WARNING o CAUTION hasta no haber entendido 
las condiciones peligrosas y habertomado las medidas apropiadas. 



Este aparato se enmarca dentro de la clase I de seguridad y se encuentra 
protegido por una borna de puesta a tierra. Es preciso queexista una puesta 
a tierra continua desde la toma de alimentacion electrica hasta las bornas de 
los cables deentrada del aparato, el cable de alimentacion o el juego de cable 
de alimentacion suministrado. Si existe la probabilidad de que la proteccion 
a tierra haya sufrido desperfectos, desenchufar el cable de alimentacion hasta 
haberse subsanado el problema. 

Puesta a tierra del cable de la red local (LAN): 

■ Si la LAN abarca un area cuyo suministro electrico proviene de mas de 
una red de distribucion de electricidad, cerciorarse de que las puestas a 
tierra esten conectadas entre si de modo seguro. 

■ Es posible que los cables de la LAN se vean sometidos de vez en cuando 
a voltajes momentaneos que entrahen peligro (rayos o alteraciones en la 
red de energia electrica). Manejar con precaucion los componentes de 
metal de la LAN que esten al descubierto. 

Este aparato no contienepiezaalguna susceptible dereparacion por parte del 
usuario. Todas las reparaciones, ajustes o servicio de mantenimiento debe 
realizarlos solamente el tecnico. 

Este producto no tiene interruptor de potencia; se activa cuando se enchufa 
el cable de alimentacion. 
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Safety Information 
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Regulatory Statements 

FCC Statement (U.S.A.) 

This equipment has been tested and found to comply with the limits for a Class 
A digital device, pursuant to Part 15 of the FCC Rules. These limits are 
designed to provide reasonable protection against harmful interference when 
the equipment is operated in a commercial environment. This equipment 
generates, uses, and can radiate radio frequency energy and, if not installed 
and used in accordance with the instruction manual, may cause harmful 
interference to radio communications. 

This device complies with part 15 of the FCC Rules. Operation is subject to 
the following two conditions: (1) This device may not cause harmful interfer- 
ence, and (2) this device must accept any interference received, including 
interference that may cause undesired operation. 



VCCI Class 1 (For J apan Only). 
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European Community 

This equipment complies with CISPR22/EN55022 Class A. 



N ote This is a class A product. In a domestic environment this product may cause 

radio interference in which case the user may be required to take adequate 
measures. 



DOC Statement (Canada) 

Complies with Canadian EMC Class A requirements. 
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Declaration of Conformity 



The following Declaration of Conformity for the HP AdvanceStack Switch 
2000complieswith ISO/IE C Guide 22 and EN 45014. The declaration identifies 
the product and related accessories, the manufacturer's name and address, and 
the applicable specifications that are recognized in the European community. 



Manufacturer's Name: Hewlett-Packard Company 

Manufacturer's Address: 8000 Foothills Blvd. 

Roseville, CA 95747-5502 
U.S.A. 

declares that the product: 

Product Name: HP AdvanceStack Switch 2000 
Model Number: HPJ3100B 
Accessories covered: HP J2606A, HP J2607A, HP J2608A, 



conforms to the following Product Specifications: 

Safety: EN609E0 (1992)+A1,A2 / IEC 950:1991+A1,A2 
EMC: EN 55022 (1994) / CISPR-22 (1993) class A 



EN50082-1 (1992) 

prEN 55024-2 (1992) / IEC 801-2 (1991) 4 kV CD, 8 kV AD 
prEN 55024-3 (1991) /IEC 801-3 (1984), 3 V/m 
prEN 55024-4 (1992) / IEC 801-4 (1988): 1 kV-(power line) 



Supplementary Information: 

The product herewith complies with the requirements of the Low Voltage 
Directive 73/23/EEC and the EMC Directive 89/336/EEC and carries the CE 
marking accordingly. LED's in this product(s) are Class-1 in accordance 
with BN60825- 1:1994. 

Tested with Hewlett-Packard Co. products only. 



Eoseville, January 17, 1997 



European Contact: Your local Hewlett-Packard Sales and Service Office or Hewlett-Packard 
GmbH, Department TRE, HeTrenberger Strasse 130, D-71034 Bdbluigen (FAX:+49-703 1-14-3 143). 



DECLARATION OF CONFORMITY 

according to ISO/EC Guide 22 and EN45014 



HP J2609A, HP J3027A, HP J3028A, 
HP J3102A, HP J3103A, HP J3108A, 
HP J3109A, HP J3136A, HP J3191A, 
HPJ3192B, HPJ3193B 



0.5 kV-(sigrial line) 




Sandra L, Sheehan, Quality Manager 



Safety-9 



Index 



Numerics 

100VG troubleshooting ... 9-8 

802.2 ... 7-31 

802.3 SAP ... 3-18 

A 

A.09.70 router release ... 7-22 
ABC ... 3-23 

configuration ... 7-32, 7-38 

encapsulation type ... 7-31 

example ... 7-30 

operation ... 7-30 

overview ... 7-30 

use ... 7-30 

VLAN ... 7-30, 3-23 
accessory kit ... 1-7, 1-9 
actions ... 2-5, 2-6 
Actions menu ... 3-2 
active path ... 7-2 
address aging ... 3-5 
address resolution protocol ... 7-30 
address table ... 4-1, 4-7 
address, manager ... 3-12 
address, network manager ... 5-3 
advanced command list ... 2-12 
advanced commands ... 6-1 
AdvanceStack Assistant ... 5-1,8-2 
air flow, ventilation ... 1-7 
ANSI terminal ... 8-10 
ARP ... 7-30, 7-31 
ARP filter ... 3-18 
ARP, proxy ... 7-31 
ASCII terminal ... 1-15 
asterisk ... 2-6 
authentication trap ... 3-13 
auto-discovery ... 5-3 
automatic broadcast control 

SeeABC. 
automatic reboot ... D-2 



backbone, high speed ... 7-5 
bandwidth 

conserving ... 7-30 

savings ... 3-23, 7-24 

reduce usage ... 7-23 

usage, filters ... 7-8 
baud rate ... 2-2, 9-6, C3 
BBS ... 9-10 
blocked port ... 7-2 
blocking state ... 3-17 
Bootp ... 2-1, 3-9, 5-1, D-5, E-l 
Bootp tablefile ... E-2 
Bootp, configuring ... E-3 
Bootp, Unix systems ... E-l 
Bootptab file ... E-2 
brackets, mounting ... 1-9 
bridge ... 1-2, 1-14, D-5 
broadcast ... 7-32 

ARP ... 7-30 

control ... 7-30, 7-35 

domain ... iv, 3-19, 3-23, 7-14, 7-30 

loop ... 7-5 

restricting ... 3-6 

storm ... 7-2 

traffic, IP/IPX ... 3-23 

traffic, port trunk ... 7-5 
buffers, message ... 4-3 
buffers, packet ... 4-3 
button ... D-5 

Config Clear ... D-2, D-5 

Reset ... D-2, D-5 

c 

cabinet, rack ... 1-8 



B 

backbone connection ... 1-12 
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exit ... 6-3 
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command, advanced ... 2-12, 6-1 
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connector specifications ... B-2 
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console port ... 2-1, 2-2, D-6 
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cable... 1-13 

D 
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domain ... 3-19 

domain, broadcast ... iv, 3-23, 7-30 
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IP ... 8-2 
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Manager ... 8-2 

Manager, OS ... 8-2 

operating system ... 2-4 

OS ... 4-18, 8-6 

TFTP ... 8-2, 8-4 
duplicate MAC address ... 7-22, 9-8 
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navigation ... 4-17 

severity code ... 4-16 
exit ... 6-7 

exit from command prompt ... 6-3 
expansion slot 
Seeslot. 

F 

factory default configuration ... 3-2 
failure, OS download ... 8-7 
fan ... 9-3 

fan fault LED ... D-2 
fault 

SeeLED. 
fault LED ... D-2 
feet, rubber ... 1-11 
filter ... 3-18 

protocol types ... 3-18 

types ... 7-8 
filters ... 7-8 

filters, configuration ... 7-10 

filters, effect of IGMP ... 7-26 

filters, port trunk ... 7-6 

flooded traffic, port trunk ... 7-5 

format, date ... 4-16 

format, time ... 4-16 

forwarding state ... 3-17 

forwarding table ... 4-1 

four-port lOBase-T module ... D-3, D-4 

FTP library service ... 9-10 

G-H 

gateway 

frame encapsulation type ... 3-7 

IPX ... 3-7 

router ... 3-10 
Get ... 6-7, 8-9 



getmib ... 6-6, 7-29 

ground, electrical ... 1-7 

grounded power supply ... 1-5 

hardware reset ... 2-12 

Help... 2-5,3-2, 6-3, 6-4 

Help, stop listing ... 6-3 

history ... 6-4 

History command ... 8-8 

host-only ... 7-21 

hot swap, module ... 1-1 

hot-swap ... D-3 

HP J 2610A/B hub ... 1-13 

HP J3102A Ethernet module 

MDI-X ... 1-13 
HP proprietary Ml B ... 5-2 
HP Router 440... 7-22 
HP Router 470... 7-22 
HP Router 480 ... 7-22 
HP Router 650... 7-22 
hub, HPJ2610A/B ... 1-13 
hub connection ... 1-12 

I 

ID, port ... 4-4 

IEEE 802.1d ... 3-17, 7-2, 7-3 

IGMP 

configuring... 7-26, 7-27,7-28 

effect on filters ... 7-26 

enable or disable ... 7-26 

example ... 7-24, 7-25 

high-priority forwarding ... 7-26 

IP multicast address range ... 7-26 

leave group ... 7-23 

multicast group ... 7-23,7-25 

multicast traffic ... 3-14 

multimedia ... 3-14 

operation ... 7-23 

querier setting, changing ... 7-29 

query ... 7-23 

report ... 7-23 

VLAN, port moves ... 7-27 
in-band ... 1-14, 2-1 
in-band security ... 7-8 
inbound Telnet ... 3-16 
installation problems ... 9-6 
Interconnect Manager 

SeeAdvanceStack Assistant. 
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address... 1-14,3-16 

address, for SN MP ... 5-1 

broadcast traffic ... 3-23 

configuration ... 3-9 

download ... 8-2 

gateway address ... 3-9 

host-only ... 7-21 

Mcast, moving port ... 7-27 

mgmt. ... 4-3 

multicast ... 7-26 

subnet mask ... 3-9,3-10 
IPX ... 3-7 

broadcast traffic ... 3-23 

configuration ... 3-7 

download ... 8-2 

encapsulation ... 3-7 

factory default configuration ... 3-7 

gateway ... 3-7 

Gateway E neap ... 3-8 

gateway encapsulation ... 7-17 

mgmt. ... 4-3 

MIB ... 5-1 

node number ... 3-7 

SeealsoVLAN. ... 3-7 
ipxping ... 6-5 

L 

LAN adapter cards 

to test end-to-end communications ... 9-9 
latency ... 3-23, 7-30 
learning bridge ... 3-1 
leave group 
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LED ... 1-6 

diagnosing the switch status ... 9-2 
Dx ... 9-5 

fan fault ... 9-4, D-l, D-2 
fault... 1-6, 9-2, 9-3,9-9, D-l, D-2 
fault slot ... D-3 

four-port lOBase-T module... D-l 

meanings described ... D-2 

pattern during self test ... 9-2 

port ... D-l 

port enabled ... 9-5 

port Rx ... D-3 

portTx ... D-3 

power ... 9-3, D-l 

power fault ... 9-4, D-l, D-2 

Power LED ... D-2 

power-on ... D-l 

power-on cycle ... D-l 

Reset cycle ... D-l 

RPS ... 1-4, D-l, D-2 

Rx ... 9-5 

security ... 3-13, 9-4, D-l, D-2 

self-test... 9-3, D-l, D-2 

slot ... D-3 

slot fault ... 9-4 

Tx ... 9-5 
link speed, port trunk ... 7-6 
link status, port ... 4-5 
Link, serial ... 3-15 
linktest... 6-5 
log ... 6-8 

LOGOUT ... 2-3, 2-4, 2-9 
loop, broadcast ... 7-5 
loop, redundant ... 3-2 

M 

MAC address ... E-l, F-l 
VLAN ... 7-15, F-2, F-3 
default ... F-2 
duplicate ... 9-8 
label ... F-2 
learned ... 4-7 
on port ... 4-8 
port ... F-2 

port counters screen ... F-3 
Main menu ... 1-15, 2-4, 3-3, 4-1 
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manager 

access ... 3-11 

address ... 3-12 

address field ... 5-3 

password ... 2-7 - 2-10 
Manual, IP address ... 3-10 
Master (MAC) ... 9-8 
MDI ... 1-13, 9-5 
MDI-X ... 1-13,9-5 
media type, port trunk ... 7-6 
media, port ... 4-4 
memory ... 4-3 
message buffers ... 4-3 
M IB ... 7-29 

access, port ID ... 4-4 

HP proprietary ... 5-1 

IPX ... 5-1 

listing ... 5-1 

standard ... 5-1 

walkmib ... 6-7 
Microsoft Windows 3.1 ... 1-15 
mode, port ... 4-4 
modem ... 1-14, 1-16, 2-3, 2-4, D -6 
modem access ... 2-1 
modem cable pin-out ... A-9 
Module ... D-6 
module ... 1-1, 1-3, 1-8 

hot swap ... 1-1, 1-3 

HPJ3102A Ethernet... 1-13 

install ... 1-3 

installation ... 1-1 
modules installed ... 4-12 
modules, new ... 2-10 
Monitor parameter ... 3-21 
monitoring ... 4-1 
monitoring a VLAN ... 3-22 
monitoring traffic ... 3-20 
MORE ... 6-3 
mounting ... 1-2, 1-7 

brackets ... 1-9 

precautions ... 1-7 

table ... 1-11 
multicast address range ... 7-8 
multicast address, spanning tree ... 7-8 
multicast filter ... 7-8 
multicast group 
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multicast traffic, port trunk ... 7-5 



multimedia ... 3-14 
multipleVLAN ... 5-1 
multiport bridge ... 3-1 
multiport transparent bridge 
bridge ... 1-2 

N 

navigation ... 2-5, 2-6 
navigation, event log ... 4-17 
NETBIOS filter ... 3-18 
network 

backbone ... 1-12 

cable requirements ... A-5 

connection ... 1-12 

design guidelines ... 1-12 
network management... 1-2 
network management functions ... 5-3 
network manager address ... 5-3 
network monitoring 

VLAN monitoring parameter ... 3-22 
network monitoring port, traffic overload ... 3-22 
Network Monitoring Port screen ... 3-20 
network number, IPX ... 3-7 
network topology ... 9-7 
networked device connection ... 1-12 
node address, IPX ... 3-7 
Novell Standard IPX MIB ... 5-1 
NSQ reply, proxy ... 7-32 

0 

operating temperature ... 1-7 

operator access ... 3-11 

operator mode ... 2-8 

operator password ... 2-7, 2-8,2-9 

optional modules, ... 1-1 

OS 

download failure ... 8-7 

download, troubleshooting ... 8-7 

FDDI Module ... 8-3 

switch-to-switch download ... 8-6 

update utility ... 8-2 

version ... 8-5 
OS download, TFTP ... 8-3 
OS version ... 4-3 
OS, download ... 4-18 
outbound Telnet ... 3-16 
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out-of-band access ... 2-1 
out-of-band management 

RS-232 port pin-out ... A-7 

P 

packet buffers ... 4-3 
packettraffic ... 4-3 
page ... 6-8 

password ... 2-1, 2-2, 2-4 

case-sensitive ... 2-9 

clear ... 2-12, D-5 

delete ... 2-9 

incorrect ... 2-8 

length ... 2-9 

lost... 2-9 

setting ... 2-8 
path cost ... 7-2 
performance ... 4-3 
physical specifications of hubs ... B-l 
ping ... 6-4 
pin-outs 

minimum cable ... A-8 
port address table ... 4-7 
Port Address Table screen ... 7-22 
port configuration screen ... 7-6 
port cost 

Seespanning tree 
port counters ... 4-5 
Port Counters screen ... F-2, F-3 
port counters, reset ... 4-5 
port data ... 4-4 
port module, new ... 2-10 
port monitoring ... 7-15 
port monitoring, port trunk... 7-6 
port name ... 3-6 
port trunk ... 3-6, 7-5 

configuration ... 7-6 

filters ... 7-6 

limit ... 7-5 

media type ... 7-6 

network management ... 7-6 

number allowed ... 7-5 

source MAC address ... 7-5 

VLAN ... 7-6, 7-15 
PortVLAN Assignment screen ... 7-19 
port, blocked ... 7-2, 7-27 
port, console. Seeconsole port. 



port, MAC address ... F-2 
port, traffic patterns ... 4-5 
power 

grounded ... 1-7 

LED pattern during ... 9-2 

overload ... 1-7 
power connector ... D-7 
power cord ... 1-5, 1-11, D-7 

space ... 1-7 
power fault LED ... D-2 
Power LED ... D-2 
power receptacle ... 1-5 
power supply ... 1-4, D-2 
power supply, grounded ... 1-5 
power-on cycle ... D-l 
precautions for mounting ... 1-7 
print ... 6-8 
priority 

Seespanning tree 
proprietary MIB ... 5-2 
protocol filter ... 7-8 
protocol filter types ... 3-18 
protocol filters ... 7-9 
proxyARP ... 7-31 
proxy NSQ reply ... 7-32 
public SNM P community ... 5-3 
Put ... 8-9 
put ... 6-7 

Q-R 

querier... 7-23,7-25,7-29 
query 
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rack ... 1-1, 1-7, 1-9 
rack mount ... 1-2, 1-8 
readme.txt ... 8-2 

reboot ... 2-4, 2-6, 2-10, 2-12, 5-3, D-5 

automatic ... D-2 
recommended cables ... A-2 
reconfigure ... 2-6 
redo ... 6-8 

redundant loops ... 3-2 
redundant path ... 7-2 

spanning tree ... 3-17 
redundant power supply ... D-8 

RPS ... 1-1 
refresh interval, screen ... 3-16 
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Regulatory statements ... 7 
remote console ... 1-16 
repeat ... 6-8 
report 

SeelGMP. 
reset... 2-10,2-12,4-18 
Reset button ... 4-18, D-l, D-2, D-5 
Reset cycle ... D-l 
reset port counters ... 4-5 
restricted access ... 3-11 
restricted write access ... 3-11 
RFC 1213 ... 5-1 
RFC 1493 ... 5-1 
RFC 1515 ... 5-1 
RFC 1573... 5-1 
RFC 1650... 5-1 
RFC 1757 ... 5-1 
RIP ... 7-30, 7-32 
RJ -45 connectors 

wiring diagram ... A-5 
RMON ... 5-1 
ROM version ... 4-3 
router ... 3-23, 7-22, 7-23, 7-30 

gateway ... 3-10 
router connection ... 1-12 
router release A.09.70 ... 7-22 
router, multicast ... 7-25 
RPS ... 1-2, 1-5, 1-7, 1-8, 1-11, 9-3, D-8 

install ... 1-4 

installation ... D-8 

LED ... 1-4 
RPS LED ... D-2 

RS-232 ... 1-2, 1-14, 1-16, 2-1, 2-2, 9-6 

cables for connecting ... A-2 
RS-232 cable... 8-2 
RS-232 console... 3-15 
RS-232 port... 1-6, D-6, F-2 
Rx 

see LED 



self-test... 1-6,2-12,9-2 
failure ... D-2, D-3 
self-test LED ... D-2 
serial cable. SeeRS-232. ... 8-2 
serial link ... D-6 

Serial Link Configuration screen ... 3-15 

server, Bootp ... 3-9 

server, TFTP ... 8-9 

setmib ... 6-6, 7-29 

setting a password ... 2-8 

severity ... 4-16 

severity code, event log ... 4-16 

slot name ... 3-6 

slot, module installed ... 4-12 

slots ... D-6 

SNA filter ... 3-18 

SNAP ... 7-31 

SNMP ... 5-1 

authentication failure ... 9-4, D-2 

communities ... 3-11, 5-3 

Communities screen ... 3-11 

configure ... 5-3 

IP address ... 5-1 

manager address ... 3-12 

MIB access, port ID ... 4-4 

public community ... 3-11 

traps ... 5-1 

vl agent ... 5-1 

restricted access ... 3-11 

public community ... 5-3 

restricted access ... 3-11 
software, OS ... 2-4 
source MAC filter ... 7-8 
source MAC filters ... 7-9 
source port filter ... 7-8 
source port filters ... 7-9 
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SAP ... 7-30,7-32 
security ... 3-19, 7-14 
security filter ... 3-18 
Security LED ... 3-13, D-2 
security, in-band ... 7-8 
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spanning tree ... 3-2, 7-2 
blocked port ... 7-2 
blocking ... 3-17 
caution ... 4-11 
Configuration screen ... 3-17 
default... 3-17 
disabled by VLANs ... 3-17 
filter ... 7-8 

forwarding state ... 3-17 

global information ... 4-10 

link priority ... 3-17 

multiple VLANs ... 7-15 

not in menu ... 3-17 

port cost ... 3-17 

priority ... 3-17 

protocol ... iv, D-5 
specifications ... B-l 

connectors ... B-2 

electrical ... B-l 

electromagnetic ... B-2 

environmental ... B-l 

physical ... B-l 
speed sense ... 1-15, 1-17, 2-2, 9-6, D-5 
standard MIB ... 5-1 
statistics ... 2-4, 4-1 

clear counters ... 2-10 

update frequency ... 3-16 
status and counters menu ... 4-2 
status LED 

see LED 
status, port ... 4-4 
STP 

Seespanning tree. 

spanning tree ... 3-2 
STP, duplicate MAC ... 7-21 
straight-through cable ... A-3 
straight-through cable, 100VG ... A -5 
subnet ... 7-23 
subnet address ... 3-19, 7-14 
subnet mask ... 1-14, 3-9, 3-10 
subnet mask, IP ... 3-9 
subnetting, multiple ... 3-23 
Sun workstation ... 7-21 
switch 2000, "A" version ... 7-5 
switch connection ... 1-12 
system configuration screen ... 3-5 
system down ... 2-2 
system name ... 6-2 
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table mount ... 1-11 

Telnet ... 1-2, 1-6, 1-14, 2-1, 2-2, 2-3, 2-4, 6-5 

disable or enable ... 3-16 
Telnet, inbound ... 3-16 
Telnet, outbound ... 3-16 
temperature, operating ... 1-7 
terminal emulator ... 1-2, 1-6 
terminal, ANSI ... 8-10 
terminal, VT100 ... 8-10 
testing twisted-pair cabling ... 9-9 
TFTP download ... 8-2,8-4 
TFTP OS download ... 8-3 
TFTP server, Unix ... 8-3 
TFTP server ... 8-9 
threshold setting ... 5-3 
time ... 6-4 
time command ... 6-2 
time format ... 4-16 
time parameter ... 3-5 
Time Protocol Enabled ... 3-5 
Time Protocol parameter ... 3-9 
time server ... 3-9 
timep ... 3-9 

Timep Poll Interval ... 3-9 
Timep Server ... 3-9 
topology faults ... 9-7 
traffic filter violation ... 9-4, D-2 
traffic monitoring ... 5-3 
traffic, monitoring ... 3-20 
traffic, port ... 4-5 

Traffic/Security Filters screen ... 3-18 
transceiver ... iii 

install ... 1-3 

remove ... 1-3 
transceiver, 10Base2 ... 9-5 
transceiver, AUI ... 9-5 
transceiver, changing ... 1-1 
trap ... 3-13 

authentication trap ... 3-13 

limit ... 3-13 

receiver ... 5-3 

SNMP ... 3-13 

Trap Receivers Configuration screen ... 3-13 
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troubleshooting ... 4-1 

approaches ... 9-1 

cabling problems ... 9-7 

diagnosing with the LEDs ... 9-2 

diagnostic tests ... 9-9 

installation problems ... 9-6 

LED pattern during power-on ... 9-2 

OS download ... 8-7 

testing the twisted-pair cables ... 9-9 

topology faults ... 9-7 

unusual network activity ... 9-8 
trunk. Seaport trunk, 
twisted-pair cable 

pin assignments ... A-6 

pin-outs ... A-3 

switch-to-computer connection ... A-3, A-4 

testing ... 9-9 
twisted-pair cascade ... 1-13 
Tx 

seeLED 
type, port ... 4-4 

u 

unauthorized access ... 3-13 
Unix TFTP server ... 8-3 
Unix, Bootp ... E-l 
unrestricted write access ... 3-11 
unusual network activity ... 9-8 
update utility, OS ... 8-2 
upload configuration ... 8-9 

V 

ventilation ... 1-7, 1-11, 9-3 
version, OS ... 6-8, 8-5 
version, OS and ROM ... 4-3 
Vines IP filter ... 3-18 
virtual LAN. SeeVLAN. 



VLAN ... 3-9, 3-19, 3-21, 3-22, 6-6, 7-14, 7-15, 7-22, 9-8 
ABC ... 7-30,7-32, 7-34 
Bootp ... E-l, E-2 
command prompt ... 6-2 
configuration ... 7-20 
configuring ... 7-19 
configuring Bootp ... E-2 
DEFAULT_VLAN ... 3-19 
deleting ... 7-21 
event log entries ... 4-16 
IPX network number ... 3-7 
limit ... 3-19 

MAC address ... F-2, F-3 

management ... 3-19 

multiple ... 5-1, 6-2 

network monitoring ... 3-20 

network monitoring port, effect ... 7-21 

OS download ... 8-2,8-3,8-4 

port monitoring ... 7-15 

port trunk ... 7-15 

restrictions ... 7-21 

source port filters ... 7-9 

spanning tree disabled ... 3-19 

spanning tree enabled ... 3-17 

spanning tree usage ... 7-15 

switch capacity ... 3-19 
VLAN, address ... 5-1 
VLAN, port trunk ... 7-6 
VT100 terminal ... 8-10 

w-z 

walkmib ... 6-7 
warranty ... 2-ii 
web ... 9-10 
web site, HP ... 5-2 
weight ... 1-2, 1-8 
world wide web ... 9-10 
world wide web site ... 5-2 
write access ... 3-11 
XNS ... 7-21 
Zget... 6-7, 8-9 
ZModem ... 8-9 
ZPut... 6-8, 8-9 
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